client Background

Our customer (the name kept confidential) is a Law firm in the southeast coast, insuring individuals and corporations.

The client was dealing with multiple security issues involving its facility and the employed personnel. These issues included:

1. Threats against employees made by former clients
2. Missing funds
3. Employees complaint's regarding "not feeling safe" at the working place
4. Dissatisfaction from the current Security Company employed by the client.
5. Physical marks around the facility raised the suspicion for a potential unwanted entry.

Our Analysis

The analysis was conducted through a 2-day in- and out-door security inspection. Our findings summarized the security soft-spots and the inherent risks and implications of the client's current security measures. Please see below for a summary of findings.

1. Physical Security issues:
   1. During the working hours, main entrance / exit doors were left open by the employees, enabling a free access to any potential attacker.
   2. By talking to employees, it was clear to the ISCG consultants that they had no basic knowledge whatsoever as regards to their working place' physical security measurements
   3. The CCTV (Surveillance Camera system) around the facility didn't cover the most crucial areas which had control over entrance / exit to and from the building.
   4. The indoor movement detectors were placed in the wrong locations
   5. The facility's Safety measures didn't merge along with Security ones.
   6. At night time, the facility was totally vulnerable to both employees' physical attack (rape, assault, robbery)
   7. No monitoring of any activity inside / outside the facility.
   8. No lightning around the facility at night time, which disable any kind of outside Camera monitoring of the outer facility area.
2. Intelligence / Information Security
   1. By talking to employees, it was clear to ISCG' consultants that these employees had no idea and no basic knowledge whatsoever as regards to Information / intelligence security in their working place.
   2. ISCG's inspection found hard copy emails with confidential information left out in the garbage, both inside and outside the facility. This information, was not shredded, and was free to use by any available intelligence attacker (competing company, individuals).
   3. During the night inspection, confidential documents were left on the office desks, fully exposed.

Our recommendations

Following the analysis, ISCG formulated a step-by-step action-plan to improve security.

1. ISCG briefed the employees on the importance of both Physical and Information Security measurements by our consultants.
2. ISCG built a new Security plan for the employees to follow on a daily basis.
3. ISCG supervised the employees' execution of the new Security measurements.
4. ISCG gave hands-on advice for the installation of new Security Devices around and inside the facility (CCTV, ID Cards, Movement Detectors, Alarm Sensors).
5. ISCG tailored a new computerized locking system to the facility.
6. ISCG worked along with the local Fire department, merging the Security and Safety measures along, providing a comprehensive and supreme Security package.
7. ISCG came up with different reasonable attack (physical / Intelligence) scenarios over the facility and its employees. These scenarios were discussed in an open discussion forum with both the employees and the executive officers. Conclusions and future security steps were drawn in order to better the security for the employees and the actual facility.