340 likes | 418 Views
Explore thrilling security management stories with real-life examples of tricks used in defense. Uncover the alarming adventures of an FSO, encounters with uninvited guests, and the mysterious vanishing tools. Learn how to navigate through unexpected scenarios and keep your organization secure.
E N D
Security…andOther Horror Stories FISWG 9 July 2014 Helen MacDonald H3MacD Consulting
About me… • Over 35 years in Defense • Over 25 years in Security Management • six different companies • numerous different groups and divisions • companies purchased by larger corporations • A lot of first-hand personal experiences to choose from • Tricks of the trade
DSS – Techniques Used • Peppering: Visitors asking the same question in different styles or one visitor asking the same question to multiple U.S. contractor employees • Wandering Visitor: The visitor uses the distraction provided by a large delegation to slip away, out of the control of the escort • Divide and Conquer: Visitors take the U.S. team members into different areas to discuss issues in order to deprive the U.S. person of his safety net of assistance in answering questions • Switch Visitors: A collector added to the group without leaving enough time for a background check on the new visitor • Bait and Switch: The visitors say they are coming to discuss business that is acceptable for discussion, but after they arrive their agenda switches to different questions and discussion topics • Distraught Visitor: When the visitor’s questions are not answered he/she acts insulted or creates an uncomfortable scene in an attempt to psychologically coerce information from the target
The China Connection • Cleared Employee: Did “Jim” (another cleared employee) tell you that he was getting married? • Me: No • Cleared Employee: Well…he’s getting married to somebody from China! • I have a sit-down with “Jim” and follow through with required reports to DSS and FBI
The Tale of The Teaming Agreement • Foreign friendly country teams with my company • Unclassified contract • Limited export terms: Country XUS; USCountry X • Follow procedures on site • Submit proposal • Exit question • Question via email upon return to homeland • Program Manager’s feedback
BD Attends an Industry Conference • Suspicious person collecting stacks of data from each exhibit • No badge • BD employee approaches him • “Left badge in room” • BD employee takes him to desk • Not registered • Gets name • BD reports to me upon return • Reports to DSS and FBI • Kitchen access
Food Court Folly • Male employee goes to lunch at nearby mall • Approached in Food Court by female foreign national and sits with him • Male employee returns next day to mall • Female foreign national is waiting at mall entrance he used day before to befriend him • Employee reports incident to me
Visit from a Friendly Nation • Export Control awaits permission for visitors • Visitors waiting in lobby • Approval arrives • Widget placement • What I do • What they do
Legend of the Last Laugh • Call from employee about another who left suspiciously in the middle of the work day • 9-1-1 call and management • Bomb Squad • The rest of the story LAST LAUGH
“I’m married???” • Checked on employee in JPAS • Noticed “single” listed • Asked him to verify as I’ve heard him talk about his wife • The rest of the story…
Quiz • What could go wrong in this scenario?
The Saga of The Uninvited Guest • Unclassified meeting on classified program • All procedures followed for foreign “friendly” visitors • Replacement visitor • No access allowed • Requests to speak to my boss • Demands to speak to management • Epic temper tantrum
Government-to-Government Goof • US Gov’t UK Gov’t • Meeting • UK needs classified document • Handoff?
Quiz • What’s wrong with this scenario?
“¡Hola! ¿Que?” • I’m visiting a division and am working late • See male Cleaning Crew member wearing badge with female’s photo • I ask to see ID • I ask for proof of U.S. Citizenship or Green Card • Not only not a citizen, but cannot produce a green card either!
Surprise Visit from Police • New contractor hired from California • Settles in and starts dating receptionist • Police visit without notice • Escort out • Check vehicle • How he was nabbed!
Faithful Foreign Friends • You can always find a renegade location that doesn’t see why there’s a problem allowing international employees unfettered access if they’re wearing a company badge and have signed a company non-disclosure agreement A company badge means I can access anything I want!
An Afternoon inMexico City • 3:00 p.m. at the airport • Reputable cab • Stuck in traffic • Surprise through the window • Rolex, jewelry
Quiz • What did the cab driver do?
The Riddle of The Vanishing Tools • Technician employee keeps noticing tools missing from cage • They show back up several days later, but then another tool goes missing continued…
Merry Christmas! • Company holiday party • Missing computer & related software • Badge access • Computer “ping” time • SOLVED!! • The rest of the story…
The Case of The Company Purchase • Small privately-owned defense contractor • Bought by larger organization • Corporate FSO doesn’t report to DSS • New corporation = new BoD • Chairman = dual citizen
The Mystery of The Misbehaving Widget • Foreign Visitor • Export Control approvals to share demonstration • Widget doesn’t work • Engineers break open the widget right there in the conference room to see what the problem is
Quiz • What’s wrong with this scenario?
“Tag! You’re it!” • China expat now cleared US National • Marries Chinese national • Can she work here? • He leaves • She remains • Goes to China for “surgery”
The Approved Export Falls Apart • Export needs to be hand-carried • All export approvals in place • Eager, inexperienced employee • Checks out with ICE desk at Orlando airport • Upon return, lands in New York • Late for connecting flight • Checks in with ICE desk upon arrival at Orlando airport
Quiz • What’s wrong with this scenario?
Why do people hesitate to report? • Don’t want to appear paranoid—there is a difference between being paranoid and being aware • Don’t want to get involved • Afraid to challenge people • Feel supervisor should report it • Feel they should mind their own business • Fear of being accused of blowing things out of proportion • Fear of confrontation • Conflict and Confidentiality • No one will trust me” • Disbelief that it is happening
Lessons Learned • CREATE TRUST: Earn your employees’ trust by example • EDUCATE: Use every opportunity you can to coach employees • KEEP AN OPEN DOOR: Always keep your door and your mind open to employees • BE AN ACTIVE LISTENER: Pay attention to the small details and to what you hear in hall-talk • WORK WELL WITH OTHERS: Management, IT, Export Control, HR, BD, Technicians, Facilities, Purchasing… • QUESTION… QUESTION… QUESTION: Trust your gut! Question everything that makes the hair on the back of your neck stand up.
Update: The China Connection • The happy couple decided to adopt a baby • Went to China • Came back with a baby
About H3MacD… • Over 25 years in Security Management • H3MacD Consulting formed this year • Basic and Tailored Security Plans • FSO Assistance and Training • Start-Ups • Interactive Employee Briefings and Training • In-Depth Self-Inspections • Proven SCR Program • Personnel Management • Coordination of Visits by Industry Speakers, etc. • Closed and Restricted Areas • Effective DSS Audit Preparation and Representation