A f e s t i v a l o f s e c u r i t y i d e a s c o n t i n u e d


As a certification body, a user-centric approach forms the basis for developing standards and codes of practice. For example, our recently upgraded code of practice, NCP 104.3 (based on BS EN 62676-4 requirements), for the design, installation and maintenance of CCTV systems is a case in point.


The Code interprets British and international Standards and takes a structured approach, ensuring the design and installation of video surveillance systems are undertaken while assessing operational risks and with the full engagement of client and users. Companies working to this and other user-centric standards are creating a successful framework for their business, facilitating best practice.


Understanding latest technology is critical to a sustainable future for any business today, both in countering threats such as cyber and in bringing benefits of enhanced security arrangements often driving efficiency within the business itself.


Those security providers continually developing stronger working relationships between their own teams, law enforcement agencies and the local community, as well as keeping abreast of new technologies, latest codes of practice, industry standards and ways of working will be best placed to tackle threats and help keep people and property safe.


Q


Rightly so, the UK Police have presented the message: We cannot do everything, alone. So, who can? Neil Basu, the Chief of Counter- Terrorism Policing, will look to make very tough decisions about how this money is spent, in a time where grass-roots policing could be more important than ever to build communities, stamp out hate crime and encourage a collective responsibility for our own safety.


This need for a collectivist society will be more pertinent than ever before, because the biggest threat to 2019 is the influx of radicalised UK and European individuals coming back from the now felled ISIS. On a community level, these evils are best defeated through community spirit; we’ve seen how religiously driven hate speech has led to the rise of politically driven hate speech, and vice versa. On an operational level, information is the key to combatting this threat.


Any increase of potential threats crossing the border should put the agenda of information sharing at the forefront of all counter-terror forces, and that’s why any Brexit deal must continue to allow the flow of information between mainland Europe and the UK.


It’s hard to see a world where operations and preparations are not intelligence driven, and while the proliferation of monitoring technologies have made aspects of an officer’s work easier, much of the cross-departmental training and preparedness remains the same, as this is the ‘bread and butter’ work for the people protecting our country.


Will 2019 prove be a pivotal year for security and counter-terror forces in the UK?


Commander Robert James Broadhurst OBE QPM – SCTX 2019 Advisory Board member


As Brexit moves into the final planning stage, and we have gained full oversight of what the 2019 budget will look like, decision makers will be working hard for the year ahead.


Philip Hammond MP recently announced that counter-terror police in the UK would receive £160m in additional funding and, whilst perhaps there will never be enough, even in the austere times we live in, our counter-terror forces welcome this funding.


© CI TY S ECURI TY MAGAZ INE – WINT ER 2018


I believe that industry and our emergency services must share their expert insights and innovations to make sure we are as protected as ever before. My role as an advisor for SCTX 2019 will encourage like-minded experts to come and share their insights across the entire security and counter-terror landscape, on an international stage – developing conversation and helping sculpt the future.


Q


What are the implications of the GDPR and Data Protection in 2019?


Irene Coyle Former Chief Inspector, Police Scotland; Data Protection, Officer, OSP Group Ltd.; Training Director, OSP Cyber Academy


The General Data Protection Regulation (GDPR) is certainly leaving its mark on the data protection field by


www. c i t y s e cu r i t yma g a z i n e . com


being the first legislation of its kind to tackle present-day dangers to data security and companies’ accountability to their customers in the face of these threats.


The post-GDPR world is one full of anxiety and opportunity. Many companies are struggling to put in place the infrastructure needed to respond to incidents and data requests as laid out in the GDPR, while entrepreneurs are profiting by building tools that enable companies to more easily manage visitor and customer consent.


Non-compliant companies are hoping that they will never incur the wrath of their customers and data protection agencies, but with data breaches continuing regardless, through the ingenuity of perpetrators or the neglect of employees and customers, who have the right to request their data at any time, it won’t be long before they will find themselves on the wrong side of the GDPR unless they take action and grab the opportunity this legislation offers them.


We know from reports published from the Information Commissioner’s Office (ICO) that data breaches continue to happen, and with 500 breach-related calls received weekly by the ICO, it will just be a matter of time before businesses will feel the financial impact, and that is before we even consider the reputational impact of such breaches. Whether it’s a breach of confidentiality, integrity or availability of data it’s going to have an impact, so how good are we in the UK when it comes to GDPR compliance?


One hundred days plus after GDPR was implemented, I find it alarming to discover from research undertaken across 600 UK- based companies that only 20% of the companies believed themselves to be GDPR compliant. Whilst 53% say they are in the implementation phase, surprisingly 27% have not yet started. Looking in a more positive direction, 74% of respondents expected to be compliant by the end of 2018.


Surprisingly, more than 51% of organisations have not yet documented their technical and organisational security measures on how they process personal data. If this is the case, how can they demonstrate compliance or accountability in accordance with GDPR?


Improved data protection compliance should encourage innovation and continuous improvement. It should not be perceived as a cost overhead but more as an investment in your people, business and future security.


The key to a stable, secure work environment is continued personal development through training, education and awareness.


Data Protection should be the driver to do things better in 2019.


> 11


Page 1  |  Page 2  |  Page 3  |  Page 4  |  Page 5  |  Page 6  |  Page 7  |  Page 8  |  Page 9  |  Page 10  |  Page 11  |  Page 12  |  Page 13  |  Page 14  |  Page 15  |  Page 16  |  Page 17  |  Page 18  |  Page 19  |  Page 20  |  Page 21  |  Page 22  |  Page 23  |  Page 24  |  Page 25  |  Page 26  |  Page 27  |  Page 28  |  Page 29  |  Page 30  |  Page 31  |  Page 32  |  Page 33  |  Page 34  |  Page 35  |  Page 36