Security Risk Management Presentation


Published on

  • Be the first to comment

  • Be the first to like this

No Downloads
Total views
On SlideShare
From Embeds
Number of Embeds
Embeds 0
No embeds

No notes for slide

Security Risk Management Presentation

  1. 1. Connecticut Conference of Independent Colleges Security Risk Management Presentation June 14, 2006
  2. 2. Changing Security Environment <ul><li>War on terrorism </li></ul><ul><ul><li>Asymmetric Warfare </li></ul></ul><ul><li>More traditional criminal activity in developing countries </li></ul><ul><ul><li>Organized Crime </li></ul></ul><ul><ul><li>Opportunity Driven Crime </li></ul></ul><ul><li>Rise of non-traditional security threats </li></ul><ul><ul><li>Cyber Crime </li></ul></ul><ul><ul><li>Piracy </li></ul></ul><ul><li>Political instability in developing countries </li></ul><ul><ul><li>Rapid deterioration in security environment </li></ul></ul>
  3. 3. Kidnap/Abduction : Growing Problem <ul><li>One of the fastest growing crimes in the developing world </li></ul><ul><li>Involves life and death decisions </li></ul><ul><li>Requires specialized expertise </li></ul><ul><li>Requires significant resources and time </li></ul><ul><li>Can have major impact on reputation </li></ul><ul><li>Can involve prolonged legal action </li></ul>
  4. 4. <ul><li>Political </li></ul><ul><ul><li>Force the government or the enemy to succumb to some demands </li></ul></ul><ul><ul><li>Create a political embarrassment / highlight issue </li></ul></ul><ul><ul><li>Harm trade / tourism or strike enemy </li></ul></ul><ul><li>Economic </li></ul><ul><ul><li>Obtaining ransoms </li></ul></ul><ul><ul><li>Organized Crime </li></ul></ul><ul><ul><li>Worldwide problem </li></ul></ul>Kidnap/Abduction : Growing Problem
  5. 5. <ul><li>Latin America </li></ul><ul><li>Short Term </li></ul><ul><li>Focused on ATM withdraw and immediate possessions </li></ul><ul><li>Brutal and traumatic </li></ul><ul><li>Transition into kidnap for ransom </li></ul>Express Kidnap
  6. 6. Kidnap Environment <ul><li>Growing problem in developing world </li></ul><ul><ul><li>Income Disparity </li></ul></ul><ul><ul><li>Access to arms and expertise </li></ul></ul><ul><li>Countries of Concern </li></ul><ul><ul><li>Mexico </li></ul></ul><ul><ul><li>Philippines </li></ul></ul><ul><ul><li>Venezuela </li></ul></ul><ul><li>Rapidly changing conditions </li></ul><ul><ul><li>Peru </li></ul></ul><ul><ul><li>Haiti </li></ul></ul>
  7. 7. <ul><li>Civil Commotion / Civil War / Coup </li></ul><ul><li>Piracy </li></ul><ul><li>Detention by foreign government </li></ul><ul><li>Extortion </li></ul><ul><li>Threats of Violence against people and property </li></ul><ul><li>Abduction / Sexual Assault </li></ul><ul><li>Cyber Extortion </li></ul>Other Threats
  8. 8. <ul><li>Local Law Enforcement </li></ul><ul><ul><li>Training / Pay </li></ul></ul><ul><ul><li>Corruption </li></ul></ul><ul><ul><li>Motivation </li></ul></ul><ul><li>US Embassy </li></ul><ul><ul><li>Limited role </li></ul></ul><ul><ul><li>Local context </li></ul></ul><ul><li>Private Firm </li></ul><ul><ul><li>Primary interest is protecting victim / client </li></ul></ul><ul><ul><li>Professionally trained </li></ul></ul><ul><ul><li>More experience </li></ul></ul><ul><ul><li>Local contacts </li></ul></ul><ul><ul><li>Integrated into crisis management planning </li></ul></ul>International Resources
  9. 9. <ul><li>U.S. students going to less traditional destinations </li></ul><ul><li>The growth of interest in studying outside Western Europe </li></ul><ul><li>Broadening of the overseas curricula </li></ul><ul><li>the increasing number of programs requiring less than a full academic year </li></ul><ul><li>Instruction in English has made broader range of sites available </li></ul><ul><li>Awareness of the need for global education has become more widespread </li></ul><ul><li>Countries with large increases included: South Africa (1,456, up 32%), (1,064, up 40%), Thailand (836, up 69%), Peru (522, up 47%), Singapore (231, up 97%), Senegal (211, up 51%), and El Salvador (145, up 86%). </li></ul>Study Abroad Program Destinations
  10. 10. Case Study <ul><li>In March 1999, Elizabeth Garland, an anthropology student at the University of Chicago, nearly died when Hutu rebels kidnapped and killed eight of her party in the jungles of Uganda. The Peace Corps had pulled its volunteers out of Uganda in 1991 and kept them out, saying it could not ensure the safety of its workers there. </li></ul>
  11. 11. Security Related Duty of Care <ul><li>Physical Security </li></ul><ul><li>Proprietary / Confidential Information </li></ul>
  12. 12. Responsibilities <ul><li>Assess and analyse their risks </li></ul><ul><li>Take reasonable steps to prevent incidents </li></ul><ul><li>Manage and/or transfer financial risk </li></ul><ul><li>Ensure an effective response </li></ul>
  13. 13. Evaluation <ul><li>Review territorial exposures </li></ul><ul><li>Evaluate individual profile </li></ul><ul><li>What is the operational environment </li></ul><ul><li>Political risk information </li></ul>
  14. 14. Prevention <ul><li>Clear and concise travel policies </li></ul><ul><li>Dissemination of information </li></ul><ul><li>Provide employee and student training </li></ul><ul><li>Clear lines of communication </li></ul>
  15. 15. Ensure an effective response <ul><li>Access to qualified incident responders </li></ul><ul><li>Develop and maintain crisis management plan </li></ul><ul><li>Test procedures (Table top exercises) </li></ul>
  16. 16. Manage and/or transfer financial risk <ul><li>“ Kidnap and Ransom” insurance a basis for security risk management program? </li></ul>
  17. 17. K&R: Market Perception <ul><li>Unimportant in the context of an overall insurance program by risk management and brokers </li></ul><ul><li>Infrequent claims activity </li></ul><ul><li>Loss severity insignificant </li></ul>
  18. 18. K&R: Perception vs. Reality <ul><li>Unimportant vs. critical security role </li></ul><ul><li>Infrequent claims vs. unclaimed incidents </li></ul><ul><li>Loss severity insignificant vs. broad implications </li></ul>
  19. 19. K&R Coverage: Outcome <ul><li>Risk Management purchases coverage as an after thought </li></ul><ul><li>Placed by generalist broker (executive risks broker at best) </li></ul><ul><li>Coverage discussed only briefly </li></ul>
  20. 20. K&R = Security Risk Management Program <ul><li>Potential applications of comprehensive program: </li></ul><ul><ul><li>Workplace Violence </li></ul></ul><ul><ul><li>Animal Rights Activism </li></ul></ul><ul><ul><li>Cyber Extortion </li></ul></ul><ul><ul><li>Proprietary Information threats </li></ul></ul><ul><ul><li>Abduction </li></ul></ul><ul><ul><li>Child Abduction </li></ul></ul><ul><ul><li>Wrongful Detention </li></ul></ul><ul><ul><li>Bomb Threats </li></ul></ul><ul><ul><li>Security threats due to coup, civil commotion, civil commotion etc </li></ul></ul><ul><ul><li>Piracy </li></ul></ul>
  21. 21. <ul><li>Dealing with wide range of threats: </li></ul><ul><ul><li>Extortion </li></ul></ul><ul><ul><li>Hijacking </li></ul></ul><ul><ul><li>Evacuation </li></ul></ul><ul><ul><li>Incarceration by foreign government </li></ul></ul><ul><ul><li>Threats to kill or injure </li></ul></ul><ul><ul><li>Threats to damage property </li></ul></ul><ul><ul><li>Threats to reveal confidential information </li></ul></ul><ul><ul><li>Disappearance of faculty or staff </li></ul></ul><ul><ul><li>Abduction </li></ul></ul><ul><ul><li>Individuals or organization declared persona non grata </li></ul></ul>K&R = Security Risk Management Program
  22. 22. <ul><li>Providing wide range of financial benefits </li></ul><ul><li>Fees and expenses of response consultants with priority access </li></ul><ul><li>Organizational liability </li></ul><ul><li>Legal fees </li></ul><ul><li>Loss of Revenue / Tuition reimbursement </li></ul><ul><li>Evacuation and Repatriation Expenses </li></ul><ul><li>Costs of personal protection </li></ul><ul><li>Additional site security </li></ul><ul><li>Public Relations </li></ul><ul><li>Medical / Psychiatric costs </li></ul><ul><li>Parental Expenses </li></ul><ul><li>Death or Injury Benefit </li></ul>K&R = Security Risk Management Program
  23. 23. <ul><li>World class security expertise </li></ul><ul><ul><li>Access to security professionals without the cost of a retainer </li></ul></ul><ul><ul><li>Immediate advice </li></ul></ul><ul><ul><li>On the ground deployment within 24 hours worldwide </li></ul></ul><ul><ul><li>Access to subject matter experts </li></ul></ul>K&R = Security Risk Management Program
  24. 24. Are they qualified? <ul><li>Proliferation of security offerings post 9/11 </li></ul><ul><ul><li>US Government outsourcing </li></ul></ul><ul><ul><li>Kidnap response expertise </li></ul></ul><ul><li>Carrier / Response relationship </li></ul><ul><ul><li>ACE/Neil Young Associates </li></ul></ul><ul><ul><li>AIG/Thomas A. Clayton Consultants </li></ul></ul><ul><ul><li>Chubb/Ackerman Group </li></ul></ul><ul><ul><li>Great American (Hiscox)/Control Risks Group </li></ul></ul><ul><ul><li>PIA (Liberty Insurance)/Corporate Risks International </li></ul></ul><ul><ul><li>St. Paul/Kroll Associates </li></ul></ul>
  25. 25. Response Evaluation <ul><li>Cases handled </li></ul><ul><ul><li>Actual deployment and guidance </li></ul></ul><ul><li>Regional specific expertise and language </li></ul><ul><li>Logistical capability </li></ul><ul><li>Responder employment relationship </li></ul><ul><ul><li>Salaried/Retained/Subcontracted </li></ul></ul><ul><li>Training and qualifications </li></ul><ul><li>Operating philosophy and procedures </li></ul>
  26. 26. <ul><li>Most markets will absorb costs of full or partial consulting services </li></ul><ul><li>Organizational planning </li></ul><ul><ul><li>Crisis Management Planning </li></ul></ul><ul><ul><li>Simulation exercises </li></ul></ul><ul><ul><li>Communication </li></ul></ul><ul><li>Operational security </li></ul><ul><ul><li>Pre-deployment training development </li></ul></ul><ul><ul><li>Evacuation planning </li></ul></ul><ul><li>Travel Security </li></ul><ul><ul><li>Country briefings </li></ul></ul><ul><ul><li>Journey management </li></ul></ul><ul><ul><li>Cultural advice </li></ul></ul><ul><ul><li>Dealing with confrontation </li></ul></ul><ul><ul><li>Safety protocols in host country (street awareness) </li></ul></ul>K&R = Security Risk Management Program
  27. 27. <ul><li>Does your institution have Crisis Management Procedures to address threats faced domestically and of study abroad programs? </li></ul><ul><li>Are you solely or heavily depending on State Department Warnings to monitor changing international environments? </li></ul><ul><li>Are you solely or heavily depending on the US embassies in country to assist in the event of a political evacuation? </li></ul><ul><li>Are you depending on “Waivers” to protect your organization’s legal liability? </li></ul><ul><li>Can your organization feel comfortable in front of a jury detailing the proactive approach your institution undertakes to protect students and faculty abroad in the event of an incident and ensuing litigation? </li></ul><ul><li>When was the last time your organization reviewed and tested your Crisis Management Plan? </li></ul><ul><li>How have your Plans changed with the changing global security environment and increase in threats to computer systems? </li></ul><ul><li>What does your “pre-deployment” advice/training consist of for students and faculty going abroad? </li></ul>Questions for Educational Institutions to Consider
  28. 28. <ul><li>Mitigating threat through: </li></ul><ul><ul><li>Prevention planning </li></ul></ul><ul><ul><li>Risk transfer </li></ul></ul><ul><ul><li>Professional Incident Response </li></ul></ul>K&R = Integral Component of Security Risk Management Strategy
  29. 29. Contact Information <ul><li>Paul Mills </li></ul><ul><li>+ 44 207 208 5229 </li></ul><ul><li>[email_address] </li></ul><ul><li>Derek Rogers </li></ul><ul><li>+212 804 0538 </li></ul><ul><li>[email_address] </li></ul><ul><li>Lisa Zanotelli </li></ul><ul><li>+212 804 0539 </li></ul><ul><li>[email_address] </li></ul>