Security Conundrum

The Security Conundrum Singapore 19 th September 2007 Presenter: Tony Ridley Regional Security Director Asia Pacific

International SOS

World’s leading provider of medical assistance, international healthcare, security services and outsourced customer care.

Help organizations manage the health and safety of their global workforce and customers.

Serve over 6,550 clients (multi-nationals, governments and NGOs) including 83% of the Global Fortune 100 and 64% of the Fortune Global 500 companies.

Introduction-Tony Ridley

Spent three and a half years in Indonesia leading a 3 500-man security firm

One year in Iraq providing protective security operation

Delivery of International SOS’ corporate and commercial security services to clients in the Asia Pacific

Security projects range from risk assessments, specialised training, simulation scenarios, policy and procedure development to security evacuation operations.

Ex-Australian Army (Special Operations) 14 years

Overview of Presentation Session Agenda

Where do we start?

What is the security objective?

Who takes the lead?

What are the challenges?

How will this affect us?

What should we do

At the workplace…….

Internet Access Visitors Whistle Blowing Safety Hazards Fire Hazards Investigations Unauthorized Access Sexual Harassment Network Access Password Access Access Control Workplace Violence Intellectual Property USB Connectors Information Security Hiring Practices Research and Development Proprietary Information Unauthorized Copies Competitors Compliance Filing Data Storage Fire Fighting Equipment Phone Calls

In the office…….

Internet Access Visitors Safety Hazards Fire Hazards Investigations Sexual Harassment Network Access Password Access Access Control Workplace Violence Intellectual Property Information Security Hiring Practices Unauthorized Copies Compliance Filing Data Storage Fire Fighting Equipment Disease Policy and Procedure Budgeting Crisis Management Business Continuity Incident Management Network Management Procurement Security Management Technical Security Equipment

Where we work…….

Visitors Safety Hazards Fire Hazards Access Control Intellectual Property Information Security Hiring Practices Data Storage Fire Fighting Equipment Disease Policy and Procedure Budgeting Business Continuity Incident Management Network Management Procurement Security Management Technical Security Equipment Media Shared Tenancy Government Planning Merger & Acquisition Special Events Travel Management Building Management Terrorism Fixed Assets Natural Disasters Accidents Security Outsourcing

Overseas operations…….

VIPs Safety Hazards Fire Hazards Theft Information Security Death Disease Policy and Procedure Business Continuity Incident Management Network Access Assaults Security Management Road Safety Media Delays Airline Selection Travel Communications Travel Management Medical Requirements Terrorism Natural Disasters Accidents Risk Assessment Business or Leisure Surveillance and Monitoring Information Services

Multi-National Security Planning Social Conditions Standards Emergency Services Infrastructure Communities Governments Language Culture Assistance Providers Local Security Services Information Services Security Service Providers Local Laws and Customs

Business Continuity Management Infrastructure Non Financial Financial

Singular Planning Emergency Plans

Standard Business Structure

Manager HR IT Health & Safety Operations Security Finance Sales & Marketing

Security Management Structure

Security Director IT Investigations Travel Safety Crisis & Emergency Risk Management Physical Technical

Health Safety Security Environment

Juggling Act

Whistle Blowing Safety Hazards Access Control Workplace Violence Information Security Hiring Practices Compliance Fire Fighting Equipment Crisis Management Business Continuity Incident Management Network Management Procurement Security Management Technical Security Equipment Shared Tenancy Merger & Acquisition Travel Management Building Management Security Outsourcing Surveillance and Monitoring Information Services Assistance Providers Local Security Services Security Service Providers Local Laws and Customs

Or Recipe for Disaster

Whistle Blowing Safety Hazards Access Control Workplace Violence Information Security Hiring Practices Compliance Fire Fighting Equipment Crisis Management Business Continuity Incident Management Network Management Procurement Security Management Technical Security Equipment Shared Tenancy Merger & Acquisition Travel Management Building Management VIPs Theft Death Network Access Assaults Road Safety Delays Airline Selection Travel Communications Medical Requirements Risk Assessment Business or Leisure Social Conditions Standards Emergency Services Infrastructure Communities Governments Language Culture Security Outsourcing Surveillance and Monitoring Information Services

What is the threat?

What is the plan?

What is secure?