CHIEF SECURITY OFFICER SUMMIT

Conference held in Toronto on February 22, 23 & 24, 2006
Chairs: Robert J. Gerden, Nortel Networks; Michel Chamberland, INCO; Peter Martin, AFI International Group Inc.; Michael W. Fenton, Intercon Security

CD-ROM: Ov. 11 hours of video presentations

To purchase, please contact Federated Press.

MODERN CHALLENGES OF CORPORATE SECURITY

• Patrick Shand Inquest recommendations
• Bill 159: Security Act changes
• Management of liability
• "Court Defensible" training issues
• The role of the "trainer"

"The upgrading of licensing and training requirements in the security field in Canada has been seen as long overdue by both the industry participants and the government. Legislative changes, such as Bill 159, will dictate and govern the way security and investigators are allowed to earn their living and to meet the training standards and mandatory requirements under this Act."

Video: 37 minutes • Overheads

Bridging the gap: Logical and physical security convergence
Cynthia Weeden, FutureShield

• Insight convergence: why should you care?
• Assessing the vulnerabilities: electronic or physical?
• Protecting the physical location of servers/terminals
• Screening employees and outside contractors with cards/PINs
• Benefits of convergence and implementing a harmonized security policy

"There are several very important benefits to the convergence of the IT and physical systems, among which are reduced costs and risks."

Video: 27 minutes • Overheads

Privacy in the workplace
J. Curtis McDonnell, Fraser Milner Casgrain LLP

• Some major issues: SIN numbers, surveillance, business e-mail
• Dispute resolution process
• Medical information decisions
• Outsourcing of personal information
• Recent decisions and scope of legislation

"Legislation regarding privacy and the workplace issues is still in the process of change and debate, due for a statutory review in 2006. Industry Canada is actively looking for submissions and input from organizations on the impact of the new privacy legislation. Some the issues that have come forth from this legislation are the use of SIN numbers, the definition of personal information, surreptitious and non-surreptitious surveillance, and business email."

Video: 55 minutes • Overheads

Risk governance: Trends in security convergence
Robert J. Gerden, Nortel Networks

• Addressing the gap between current and future states
• Understanding current state of enterprise security lifecycle
• Protecting business drivers from security risk
• Linking security risk strategies via risk mitigation architecture
• Information protection: case study

"Security risks are increasingly more complex, interrelated and global, where consequences can be more devastating to business and its extended enterprise, yet risk management has not evolved to address these changes."

Video: 35 minutes • Overheads

MANAGEMENT & INTERVENTION

Protecting terrorist targets in Canada
Derek S.T. Baldwin, IBIS Corporation Risk Management Services Inc.

• Critical elements: threat awareness, vulnerabilities, projection of countermeasures
• Eco-terrorism and long-term terrorists
• Developing an operational plan
• Protecting your remote and foreign operations
• Undercovers and knowledge in your own facility

"Effective counter-terrorist measures depend on awareness, planning, and proper use of one's security resources."

Video: 45 minutes • Overheads

Major project security: The Niagara tunnel
Richard Myers, Ontario Power Generation

• Background and lessons learned from previous experiences
• Conducting a threat risk assessment
• Taking stock of risk mitigations in place
• The security risk analysis process
• Internal security processes: results and going forward

"Security has evolved into a managed system for security at Niagara Plant Group, with our information-sharing network expanded exponentially. We had to focus on lessons learned from previous projects. As a result, part of our strategy was to separate the construction site from the plant."

Video: 38 minutes • Overheads

Securing Canada's largest airport: A Pearson International case study
James (Jim) Bertram, Greater Toronto Airports Authority (GTAA)

• GTAA security responsibilities as required by legislation
• Baggage screening: security screening order and CATSA's regulations
• Safety & security standards and policy & procedures
• Physical security components

"The federal government sets safety and security standards for all Canadian airports. Through extensive monitoring and sophisticated surveillance techniques, as well as layered security methods, GTAA tries to meet or exceed these standards to ensure the safety and security of the public and staff."

Video: 46 minutes • Overheads

Incident response management: A discussion of an organizational matrix to be used when responding to emergencies
Kevin Murphy, Woodbine Entertainment Group

• Incident response management
• Incident command system
• First responder's guide
• Emergency scenarios and responses

"We use a response incident command system matrix developed by the National Training Center in Washington, DC, which is meant to identify all the possible things you might consider in responding to an incident."

Video: 33 minutes • Overheads

Creating a dynamic security department: Leadership in difficult times
Peter Martin, AFI International Group Inc.

• Ten key competencies of leaders
• Six primary leadership styles
• Leading vs. managing
• Motivation and communication
• Growing a team
• Setting goals and direction

"From the point of view of available resources and budgets, competent leadership is fast becoming the most important needed ingredient in the field of security today."

Video: 42 minutes • Overheads

Preparing for pandemic
Vito Mangialardi, Allstream Inc.

• Pandemic mixed messages
• How the H5N1 pandemic attacks from infection to organ failure
• Pandemic reactive measures
• Pandemic planning factors: impacts
• Preparing for a pandemic: a practical guide

"A worst-case scenario paints a bleak picture. So what can your organization do about it? You need proactive planning, in other words, prepare for it. Implement some operating response strategies and plans (proactive and reactive), which are flexible enough to adapt to how this threat may unfold beyond normal scenarios."

Video: 57 minutes • Overheads

Incident and consequence management: Planning and priorities
B.J. (Bert) Cowan, Competitive Insights Inc.

• Government security policy
• Some relevant legislation
• Internal emergencies and anatomy of a crisis
• Issues for security

"Departments must establish a business continuity planning program to provide for the continued availability of critical services and assets, and other services and assets when warranted by a threat and risk assessment (Section 10.14) You should know how government thinks about security if you are in private business. If you are doing business with the government, you better know about the government security policy and how it works because under that security policy if they are giving you some government information, you have to protect that information in the same way as they do."

Video: 42 minutes • Overheads

PROTECTING YOUR ORGANIZATION FROM OUTSIDE THREATS

The role of computer forensics in workplace investigations
Jason F. Conley, Digital Forensics Canada Inc.

• "Crash course" in forensics fundamentals
• Managing an e-investigation
• Combating sensitive data theft
• Case studies: fundamentals of digital forensics and evidence

"The prevention of computer fraud is increasingly better met through proper digital forensic investigation rather than through the IT department."

Video: 41 minutes • Overheads

Parking lot security: Keeping people safe outside the building
Michael W. Fenton, Intercon Security

• Security design features
• Security team role and training
• Target hardening: C.C.T.V. cameras
• Long-term monitoring results: event statistics
• Video surveillance vs. smart surveillance
• What are the applications of S3?

"Improving security in parking lots essentially revolves around altering the environment from both the point of view of the target and the safety design features. For example, if your parking lot is divided into smaller areas it creates the perception of fewer escape opportunities for bad guys."

Video: 55 minutes • Overheads

• Case study: crisis management plan
• Dynamics and dichotomies of violence
• Defining the problem: threat/risk analysis and causal conditions
• Staffing and training: team profile
• Behaviour modification

"By monitoring the metrics, we try to maximize the goals we have in security to provide a safe and secure environment for workers and our clients. We do strategize to reduce violence in terms of communication and crisis management. In addition, we have implemented extensive training of security staff, as well as introduced behavioural and equipment modification through metal detectors."

Video: 47 minutes • Overheads

• The CPR risk assessment model
• Partnerships and community outreach programs
• Dealing with threats and concerns: terrorism and transportation of drugs and illegal aliens
• Safety and security policies, plans and processes

"Presentations on security and trespass prevention topics are routinely delivered to CPR employees at local Health and Safety meetings and other venues. In addition to this community outreach, CPR Police Service supports educational programs such as Operation Lifesaver and Direction 2006."

Video: 28 minutes • Overheads

• Canadian vs. U.S. travel security measures
• T.H.E. factors in travel security: threat, human skill set & exposure
• The global security issue
• Travel report card: how are we doing?

"T.H.E. factors (threat, human skill set and exposure) define the complexity of the travel security system needed. Some companies need a brochure, while others need a complex interactive system. Do not buy a transport trailer if you are only moving a teacup!"

Video: 39 minutes • Overheads