THE MAGAZINE

Holding the Line
September 2006
COVER STORY

Counterfeit drugs

By

A bill (S. 2668) introduced by Sen. David Vitter (R-LA) would require that companies incorporate RFID tagging technology, tamper-indicating technologies, and security packaging into all prescription drugs. These technologies would be used only to authenticate the integrity of the drugs and would not be used to transmit any identifying information about healthcare practitioners, consumers, or advertisers. S. 2668 has no cosponsors and has been referred to the Senate Health, Education, Labor, and Pensions Committee.

FEATURES

Casinos Strengthen Their Security Hand

By Derk Boss, CPP, and Ann Longmore-Etheridge

A survey of casinos finds that many extra security measures implemented in the wake of 9-11 are being kept in place.

Patrolling Performance

By Guillermo Guevara Penso

Find out how this school fixed a problem it had with poor performance among its guards, some of whom never even carried out their patrols.

HOMELAND SECURITY

Assessing Threats from Passengers

By Robert Elliott

Spotting suspicious conduct by air travelers, limiting sensitive exports, and speaking with California’s homeland security director.

Screening Exports

By Robert Elliott

Spotting suspicious conduct by air travelers, limiting sensitive exports, and speaking with California’s homeland security direc

State Perspective - California

By Robert Elliott

Spotting suspicious conduct by air travelers, limiting sensitive exports, and speaking with California’s homeland security director.

PRINT EDITION ONLY

Legal Report

Sexual harassment and wrongful termination in the courts. Also, what’s new in Congress and the state legislatures

A Guide to the 2006 ASIS Exhibits

Check out the exhibitors at the ASIS International 52nd Annual Seminar & Exhibits.

Arbitration Dos and Don’ts

By Landis Wade

Companies are increasingly using arbitration, but management needs to understand the legal issues before crafting a policy.

Legal Report

By Teresa Anderson

Federal appeals on cases involving intellectual property and employee monitoring, regulations on counterfeit drugs, and a new cargo security bill.

Numbers

By Michael A. Gips

52

The number of teams that DHS plans to have by year-end to find and deport illegal immigrants who have not appeared for their court hearing or for their ordered removal.

Jargon Watch

By Michael A. Gips

Demystifying terms used in the security industry.

SWOT Analysis: This SWOT has nothing to do with tactical assault teams, but rather strategic planning for a project or venture. In competitive intelligence, SWOT (Strengths, Weaknesses, Opportunities, Threats) Analysis is often used to turn information into actionable intelligence. According to a recent survey by the Society of Competitive Intelligence Professionals (SCIP), SWOT is one of the two analytical techniques (along with competitor analysis) frequently used by competitive intelligence practitioners.

Who’s Impersonating Hospital Inspectors?

By Michael A. Gips

The fear is that the impostors are terrorists scouting hospitals for vulnerabilities, says Fred Roll, a healthcare security consultant and the president of the International Association for Healthcare Security and Safety (IAHSS).

License Plates Drive Video Improvements

By Michael A. Gips

License plates drive video improvements, hurricane lessons, imposters in hospitals, susceptibility to fraud, and more

Certification Profile

By Chris Flynn

Corrine Huskey CPP, believes there is a direct connection between the security industry and the coporate and business worlds.

ASIS News - More Programs in San Diego

By Ann Longmore-Etheridge

Dispatches from the corporate front, and a preview of educational sessions in San Diego this month.

Business News

By Ann Longmore-Etheridge

Dispatches from the corporate front, and a preview of educational sessions in San Diego this month.

Train Staff Virtually Anywhere

By Douglas W. Fogwell

The manifest benefits of Web-based training.

Seeing the Risk Through the Trees

By Ted Almay

By graphing risk on a tree, with the trunk being the attacker’s goal and the branches being his methods, companies can assess the need for countermeasures.

 

The Magazine — Past Issues

EDITOR'S NOTE

Border Measures at Cross Purposes

By Sherry L. Harowitz

The obsession with the Mexican border is only one of the holes in our border net. Another is that we can’t really ID people at border checkpoints.

Border Measures at Cross Purposes

By Sherry L. Harowitz

Is the focus on the Mexico border leaving a northern exposure?

TECHNOFILE

Numbers

By Peter Piazza

5

Maximum percentage of IT budget spent on security by the average U.K.-based company, according to a survey of information security breaches by PricewaterhouseCoopers.

Quick Bytes: Unsafe workers.

By Peter Piazza

Seventeen percent of employees have launched a hacking tool or keystroke-logging software on their network in the past year, an increase from 12 percent from the year before. That’s no surprise given that 47 percent of the 351 IT decision-makers interviewed by Websense said employees who received phishing e-mails clicked on the link they found in the message, while a third of those interviewed admitted that they don’t block executables in e-mails. The annual Web@Work survey interviewed 351 information technology managers from U.S. companies of all sizes. @ More results of the survey are at SM Online.

Cell Networks Evolve Into Data Networks

By Peter Piazza

Wireless continuity between access points, Web 2.0 under increasing attack, local weather updates, and more

New in Plaintext

By Peter Piazza

The book is best browsed through in front of a computer, because you’ll be eagerly visiting the Web sites he writes about and trying the software and tactics he describes. Many of the latter I had never heard of. For instance, in a chapter on how to work around censorship (government or corporate) of Web sites, he describes how to access banned Web pages by having them e-mailed to you. No special software is required; just send an e-mail containing the URL of the Web site you want to see to a certain e-mail address, and the full site will be sent back to you inside a return message.

Quick Bytes: Data breach advice

By Peter Piazza

Not long after a data breach involving the Department of Veterans Affairs, David M. Walker, Comptroller General of the United States and head of the Government Accountability Office, gave testimony to a House committee on steps that can be taken to reduce the likelihood of personal data being stolen. The first is to conduct a privacy-impact assessment before deploying new systems; Walker noted that agencies do not always do this. He also recommended limiting the collection of personal information, and limiting the time that such information is retained. @ "Privacy: Preventing and Responding to Improper Disclosures of Personal Information is available at SM Online.

Growing Threat to Online Applications

By Peter Piazza

Wireless continuity between access points, Web 2.0 under increasing attack, local weather updates, and more

A Site To See

By Peter Piazza

It’s estimated that millions of Americans each year suffer identity theft. The Federal Trade Commission (FTC) has set up a Web site to help deter, detect, and defend against identity theft. The site contains a number of educational resources, including a 10-minute educational video that provides an overview of the problem, a PowerPoint presentation, and several PDF publications.

 

Getting Ahead in IT

By Peter Piazza

If you are an IT security professional or are interested in becoming one, you’ll find a new career guide issued by (ISC)2 to be a helpful resource. The guide describes the types of jobs available (including typical job titles) and explores the various areas of expertise within information security, as well as educational requirements, technical skills needed, salary ranges, and the certifications that can help you advance your career. The guide also includes a list of schools offering IT security curricula and relevant professional associations. @ Career Guide: Decoding the Information Security Profession is at SM Online.

Quick Bytes:Manager’s IT guidebook.

By Peter Piazza

Anyone looking for an overview of the elements that make up an information security program can turn to a comprehensive guide released by the National Institute of Standards and Technology (NIST) titled Information Security Handbook: A Guide for Managers. The handbook covers every aspect of security, from awareness and training issues to incident response and recovery strategies. Intended for senior managers, it’s as appropriate for the private sector as it is for government readers; as the authors note, while private- and public-sector requirements may differ, “the underlying principles of information security are the same.” @ Security Management Online has the NIST handbook.

CASE STUDY

Olden Days, New Technology

By Ann Longmore-Etheridge

A 1950’s-style diner goes modern when it comes to CCTV technology.

BOOK REVIEWS

Vulnerability Assessment of Physical Protection Systems

By Dan Bergevin

No security professional involved at any level in the VA process for physical protection systems can afford to operate without this field manual.

Introduction to Emergency Management, Second Edition

By Jim Ellis, CPP, PSP, CSSM

Authors George Haddow and Jane Bullock examine emergency management with a focus on the Federal Emergency Management Agency (FEMA) and its role in the Department of Homeland Security (DHS). With insiders’ views of their agency born from their time with FEMA in the late 1990s, Haddow and Bullock have special insight into the responsibilities and organization of FEMA.

Anti-Spam Toolkit

By John Mallery

The book is ideal for system administrators tasked with evaluating antispam products for their organizations, but there is something for every level of user.

Security and Usability: Designing Secure Systems That People Can Use

By Mayer Nudell, CSC

The six major parts of the book all have their enlightening moments, whether discussing authentication mechanisms or privacy and anonymity.

Knockoff: The Deadly Trade in Counterfeit Goods

By Terry Cochran, CPP

Lots of people have fake Rolex watches, Coach bags, or movies on DVD. Though some people justify these as “innocent” copies that democratize purchasing power, manufacturers see them as a significant funding source for organized crime, which is destroying the hard work of the world’s watch, designer bag, film, and other industries. But is this trade in counterfeit goods really deadly, as the author of Knockoff claims?

Criminal Justice Technology in the 21st Century, Second Edition

By Bob Sena, CPP

The book is a compilation of scholarly articles targeted to professors, students, and policymakers, relying heavily on research studies that employ both inferential and descriptive statistics. The material is presented in four sections, with contributions appearing from some of the leading criminal justice experts in the academic community.

The Privacy Management Toolkit

By Ben Rothke, CISSP

In the early days of nuclear physics, many people scoffed at the notion that splitting an atom could devastate cities. They simply did not understand the power of the atom. In many ways, privacy is akin to the atom: it sits dormant among the minutiae of life until it is split, or invaded, unleashing forces that can have destructive consequences.

Infiltration: How Muslim Spies and Subversives Have Penetrated Washington

By Mark H. Beaudry, CPP

If true, this book is terrifying. If false, it’s wildly irresponsible. Sperry writes an alarming exposé of how Muslims have been secretly infiltrating American society, government, and culture, all the while pretending to be peace-loving and patriotic, while actually supporting violent jihad to turn the United States into an Islamic state.

 

Beyond Print

Beyond Print

See all the latest links and resources that supplement the current issue of Security Management magazine.