|
Security is protecting your company from threats. The sources of threats
can come from many sources:
- Natural disasters,
- Equipment failure: your own or others outside, i.e., power failure,
phone outage, fire or other hazards,
- Deliberate human acts: inadvertent data entry, bombing, theft, biological
contamination, arson, network-based attacks, unauthorized access to
confidential information, and related issues.
This article is mainly concerned with the deliberate human act.
Protecting your company's assets often requires good security planning.
That's why companies assess how possible threats could affect operations
and prepare a comprehensive Site Security Plan.
Risk Analysis
No company should implement a security plan or measures without first
analyzing the risk of loss. This involves looking at the probability and
severity of potential threats to determine a risk rating (critical, high,
moderate or low) for those threats. Once each threat has a rating, the
company can focus its efforts on those threats with the greatest risk.
Each company will need to consider whether their geographic location
and type of business is one that a terrorist would target or could use
for obtaining materials or vehicles to be used for terrorist acts.
Target Areas
A company will also attempt to determine what assets criminals and terrorists
are likely to target, as well as which access points they are likely to
use. Common access points include reception areas, loading docks, vehicles
and computer networks.
Prevention Measures
Based on the risk analysis and target areas, determine ways to prevent
losses. This involves:
- Physical security Delaying, denying or detecting the access
of unauthorized persons. These measures include installing locks, fencing,
security cameras, proper lighting, and network firewalls.
- Information security Protecting sensitive information and
preventing disruption of operations. These measures include securing
records, shredding documents, following retention periods, using passwords,
backing up data, and supervising visitors.
- People security Protecting employees, contractors, customers,
and visitors. These measures could include identification badges, escorting
visitors while on your property, having your employees keep their eyes
open for anything out of the ordinary, and reporting suspicious behavior.
- In-transit security Protecting assets while they are being
transported or transmitted. These measures include background checks,
fingerprinting, locks, and satellite tracking.
Trucks
The federal government plans to adopt a rule requiring the locking of
all trucks on the road, a requirement that could have a far-reaching effect
on the trucking and freight-delivery industry. The Transportation Security
Administration (TSA) said it wanted the rule because it was worried about
terrorists secretly accessing unlocked trucks to hide remote-controlled
bombs or other weapons aimed at cities or strategically sensitive locations.
Every truck that's on the road in the United States should be kept
locked, and I'm steadfast in my commitment to getting that to happen,
says George Rodriguez, director of cargo security for the maritime and
land-security division of the TSA.
The federal government's proposed rule requiring
the locking of all trucks on the road could have a far-reaching effect
on the trucking and freight-delivery industry.
|
Federal officials point out that that now, only 20 percent to 30 percent
of truck trailers and cargo areas are locked consistently. Under the proposed
change, trucking and shipping companies would be required to install locks
on their trailers and storage areas. Rodriguez notes that drivers and
trucking companies would be ticketed and face federal fines for not having
or using the locks. For the next six months or so, Rodriguez acknowledged
that the Transportation Security Administration will be talking about
the proposed rule internally, as well as with shipping and trucking companies.
They'll come up with the actual wording on the regulation in mid-2003.
That will be followed by a period for public comment before it can go
into effect. But ultimately, Rodriguez predicts that it will soon be part
of the TSA's security system.
Drivers
Regulations requiring background checks on CDL drivers with hazmat endorsements
are already on the books. As soon as the infrastructure is in place to
actually do the checks, the law will be activated. Please note that the
background checks may take six weeks or longer as this program gets started
and the details and bugs are worked out. Please make sure you send your
drivers in early to renew their licenses and endorsements because we have
no assurances that the driver will be allowed to continue driving until
the background checks have been completed.
Enroute Security
DOT is currently considering different methods and technologies to enhance
transportation safety and security while the truck is on the road, and
is asking trucking companies for ideas and suggestions based on current
security programs being used today. Based on the feedback, DOT will be
developing security programs. We can only hope that these will be in the
form of suggestions and not regulations.
Minimize stops en route; if you must stop, select locations with adequate
lighting on well-traveled roads and check your vehicle after each stop
to make sure nothing has been tampered with. This is the main reason DOT
eliminated the tire checks that were required every two hours or 100 miles,
whichever came first. They didn't want to expose the driver to undue risk
on the side of the road. (See the January 2003 Traffic Bulletin
for more information on required tire and load checks.)
Avoid layovers, particularly for high hazard materials. If materials
must be stored during transportation, make sure they are stored in secure
facilities. Train drivers on how to avoid hijacking or stolen cargokeep
vehicles locked when parked and avoid casual conversations with strangers
about cargoes and routes.
Consider utilizing advanced technology to track or protect shipments
en route to their destinations. For example, you may wish to install tractor
and trailer anti-theft devices or utilize satellite tracking or surveillance
systems. As an alternative, consider frequent checks with drivers by cell
phone to ensure everything is in order. Get to know your customers and
their hazardous materials programs. If you suspect you shipped or delivered
a hazardous material to someone who may intend to use it for a criminal
purpose, notify your local FBI office or local law enforcement officials.
If you suspect you shipped or delivered a
hazardous material to someone who may intend to use it for a criminal
purpose, notify your local FBI office or local law enforcement officials.
|
Location
How's the fencing around your property? Is it adequate enough? Check the
adequacy of locks and other protective equipment. Consider equipping access
gates with timed closure devices. Conduct frequent inspections. Install
additional lights, alarm systems, or surveillance cameras. Restrict access
to a single entry or gate. Place limits on visitor access; require visitors
to register and show photo identification and have someone accompany visitors
at all times. Lock all vehicle and delivery trailer doors when not in
use.
Periodically inventory the quantity of hazardous materials you have on
site in order to recognize if a theft has occurred. Keep records of security
incidents. Review records to identify trends and potential vulnerabilities.
Report any suspicious incidents or individuals to your local Federal Bureau
of Investigation (FBI) office and to local law enforcement officials.
Is your facility large enough or handling materials or vehicles that
adding security guards might be a consideration? Have you requested increased
off-hours patrols by security or law enforcement personnel?
Policies and Procedures
You should write your security plan and then communicate it to all employees
so that security measures are followed and everyone knows what to do should
a security incident occur. Up-to-date information is a key element of
any security plan. You should consider methods to:
- Gather as much data as you can about your own operations and those
of other businesses with similar product lines and transportation patterns;
- Develop a communications network to share best practices and lessons
learned;
- Share information on security incidents to determine if there is a
pattern of activities that, when considered in isolation, are not significant,
but when taken as a whole generate concern; and
- Revise your security plans as necessary to take account of changed
circumstances and new information
|