Looking Back, Looking Forward - The Security Highs and Lows of 2011

So what happened last year? Well apart from it flying past, for us at Chatback Security it has been a great 2011. We successfully continued our efforts to offer opinions on security risks and threats and have now built up a steady readership and loyal following.

January was kicked off with a promise for us to be more active on the blog and introduce Fraud and other topics. This proved succesful in 2012:

7000 blog readers (55% up on 2010)

3500 unique visitors

4000 tweets via @securityspeak and @chatbacksy

2500 twitter followers

Readers from over over 50 countries

February saw scam awareness month and we also received a couple of emails asking for us to claim our lottery winnings, all we had to do was supply our bank details apparently?! It’s amazing how email addresses get identified by scammers for this type of contact (its even more amazing that people fall for these scams). 

The MPS kicked off a new counter terror publicity campaign asking for people to look out for unusual activity or behaviours that might strike people as not quite right and out of place in their normal day to day. Just one piece of information could be vital in helping to disrupt terrorist planning and, in turn, save lives. If you see it, report it.

March saw us talk about the HOSDB INSTINCT exhibition which considering this exhibition is designed largely for law enforcement and government agencies was actually quite interesting and food for thought when considering the future applications that could find there way in to our airports and hopefully other environments. 

The ‘Insider Threat’ came all too true with a British Airways software engineer being sent down for 30 years after being convicted for plotting to blow up a plane. This particular topic is close to our hearts and seems to have fallen off organisations radars a bit and it's not being discussed as much as it should be. 

April was the month that the Centre for Protection National Infrastructure (CPNI) released a 'Public Realm Integration' document which although it looked like it had been designed by Saatchi & Saatchi it still offers some very good information about when and what you should consider when deploying any Hostile Vehicle Mitigation in the public realm.


May brought us our 1 year celebration of the blog and the introduction of the Stuxnet, the Future of Malware posting.

Paul celebrated our first year with a posting on Insider Threats.

June saw me and Paul enter and successfully complete the 26 mile London Bikeathon in support of a charity close to both our hearts ‘Leukaemia and Lymphoma Research'. We were very kindly supported and sponsored by our new friend in the US Brad Apitz (please follow him at @BradCHSV) who helped us raise over £500 in sponsorship. Thanks again Brad. 

I presented at The 8^th Annual CISO Summit in Rome which was attended by a very experienced audience. I must have done ok because the organisers invited me to speak and chair a panel on social mediasecurity risks at the CSO later in the year. I have a lot of time for MIS Training and will be sharing more news, events and speaking opportunities throughout the forth coming year, so keep an eye on our events page. 

Towards the end of June we both attended The Security Institute’s Annual Conference.  

June also saw the introduction of The National Security Workers Union (NSWU) in the UK.

July saw a couple of guest bloggers posts and the Home Secretary Theresa May announced the terror threat level for the UK has been reduced from severe to substantial. However, a terrorist attack still remains a strong possibility and may well occur without further warning, she went on to warn. Mrs May said: "The change in the threat level to substantial does not mean the overall threat has gone away - there remains a real and serious threat against the United Kingdom and I would ask the public to remain vigilant." January 2012 we remain at ‘substantial’.

August we took leave and you do not want to know where or what we did because that is boring.

September saw us post a summary of the GMB report on From Workplace Watch To Social Spy: Surveillance In (and by) The Workplace.

October brought us National Identity Fraud Prevention Week (NIDFPW), which over the last seven years has helped consumers and businesses alike to fight identity fraud. NIDFPW brings together partners from both the public and private sector to contribute their resources and experiences to help UK businesses and consumers protect themselves against identity fraud. Research commissioned by Fellowes for the campaign has shown that consumer confidence is at an all time low, with 96% of people concerned that the organisations they deal with aren’t treating their data responsibly.

November saw the UK government announce The New Cyber Security Strategy, I attended the Chief Security Officer (CSO) Summit in London where I presented on Security Assurance and chaired a panel session on social media security risks and it was also Get Safe Online Week 2011 (7th - 11th November 2011) What is Get Safe Online Week? Well if you missed it, it’s an annual event to raise awareness of internet safety issues. They reach out to consumers and small businesses through competitions, events and communications activity and to businesses and organisations through their annual Get Safe Online Summit to find out the latest updates or join us and follow them on Twitter @GetSafeOnline for all the latest news. Finally Chatback Security was approached after being recognised as known and influential security bloggers (get us) to participate in the Cyber security Challenge UK 2012 as journalists.  Watch this space we will be talking all about it.

December saw the MPS launch a dedicated police unit to tackle Metal theft, Anonymous were at play again, attacking Stratfor (the website is still offline) and my son’s first published photos to support the 4x4 crime prevention posting by Paul. Our recent posting by Infosec Island was posted at the end of December and still worth a read on security risk management and it’s not all about assessment.

Happy New Year.... 2012 is here so what does it hold for us personally and professionally. Well firstly, more of the same but different, if that makes sense. The year starts with us attending the first round of the Cyber Security Challenge UK. The first 5 months see me being invited to speak at the Information Security Executive Summit in Richmond, UK, Counter Terror Expo in London, CISO Summit 2012 in Prague and the Fraud Corruption Africa Summit in Zanzibar and then of course is the Olympics, London 2012.  


Some of the threats and risks on the horizon that are going to require some effort in combating are:

• Continued trend in metal theft (cabling, ornate statues, church roofs etc), hopefully some change in legislation also around the selling/buying of scrap metal
• Protection of our critical infrastructure (in paricular SCADA systems)
• Hackivism 
• Insider threats
• Olympics (surprise surprise) 
• Under valuing physical security measures (?too much focus on cyber threats maybe)
• Large scale scams and frauds 
• Recruitment of the right security people at the right time

We seek to enhance our relationships with @GetSafeOnline and London Fraud Forum (LFF) and Paul will continue with his work in the Security Institute whilst I intend to work closer with London First who kindly invited us to seminars and events on the Olympics and Cyber Crime.

We are always looking for new areas of interest and guest bloggers or supporters, if you feel we (or you) can contribute to your ideas please let us know via chatbacksecurity@gmail.com or contact either of us direct via LinkedIn (Richard or Paul).  

In the meantime we wish you a very safe, secure and prosperous Olympic new year and look forward to staying in contact with all our friends and supporters. 

Thanks and enjoy. Richard 

Press Release: The NSWU announces Top 10 Security Industry Employers Awards

PRESS RELEASE

To promote and improve the treatment of UK security industry workers, we are announcing a new award.

An award that is voted for by the workers. All those that work for a company that not only pays fairly, but is decent, understanding and treats its employees with the respect that such vital and valuable staff deserve, are encouraged to tell us about it.

We have all heard the horror stories and could list the 'companies to avoid', but we want to promote and recognise the decent employers in the industry, while encouraging those that are 'not so good', to change.

The Union hopes to make this an annual award, and will accept nominations and supporting information, from all workers within the industry, Union members or not.

We know that good treatment from an employer creates and attracts motivated, committed and professional staff. This benefits the end customer as well as the employer in so many ways. We hope that the award winning companies will be a beacon for less enlightened organisations to follow and that, as a result, standards within the industry will start to improve.

Nominations will be accepted from now, and the Award winners will be officially announced in December, date to be confirmed nearer the time....

This is just one of many initiatives that the NSWU intends to implement with the intention of driving industry standards ever upwards and in so doing, increase the level of respect and appreciation for the vital work performed by the workers in the UK security industry.

http://www.thenswu.org/     NSWUinfo@gmail.com     Twitter: @theNSWU

Press Release: The National Security Workers Union (NSWU) Is Born!

With over 350,000 workers employed in the UK private security industry(a), the employees in this sector have been, without doubt, the most under represented or supported workforce remaining in the country.

That's about to change......

Security staff have faced a program of regulation and licensing over the last few years which we all hoped would be the start of a massive uprating of respect and appreciation for the role performed by the hard working professionals within the industry. Indeed even the SIA (Security Industry Authority) anticipated a new “Golden Age” as lack of licensed security professionals would cause a shortage of supply and hence increase wages across the board.

Sadly these hopes were never realised and indeed, though security is still such a vital part of so many companies operations, our jobs never the less, seem to be increasingly less well regarded and the current economic climate has served as a universal excuse to reduce salaries and silence decent across the entire sector.

The NSWU has been formed with the following objectives:

• To represent our members on a personal level, in any conflict with employers.

• To enlighten and increase professional and public awareness of the massive responsibilities and vitally important roles performed by our membership.

• To provide a source of advice and guidance in all aspects of working life for our membership.

Conceived by Rollo Davies, a security professional for over 20 years, the NSWU aims to keep administration and running costs to a minimum, always, enabling the fees of it's members to be used where needed most, providing the support and assistance required, when and where it is needed.

Initially with a 24hour email, and telephone advice service backed up with the website and a representation provision, we have plans to expand, with a qualified full time employment law specialist and trained area representatives, as soon as membership numbers allow.

Some of the largest security companies in the country do not recognise any union currently and the general unions that are available seem to go widely unsupported or promoted at the moment.

The NSWU, run by security professionals for security workers in all sectors of the industry, will campaign to redress the balance and fight to give those whos sole responsibility is to protect people and property, sometimes working unimaginably long hours for relatively poor pay, the respect and acknowledgement they deserve.

http://www.thenswu.org/          NSWUinfo@gmail.com           Twitter: @theNSWU