<?xml version="1.0" encoding="utf-8"?>
<rss version="2.0">
   <channel>
      <title>Bizjet Security News and Updates</title>
      <link>http://bizjetsecurity.com/blog/</link>
      <description></description>
      <language>en</language>
      <copyright>Copyright 2008</copyright>
      <lastBuildDate>Thu, 14 Aug 2008 22:54:21 +0000</lastBuildDate>
      <generator>http://www.sixapart.com/movabletype/?v=3.2ysb5-20051201</generator>
      <docs>http://blogs.law.harvard.edu/tech/rss</docs> 

            <item>
         <title>TSA Once Again Targets General Aviation Planes</title>
         <description><![CDATA[<h2 style="background: white"><strong><span style="font-size: 9pt; font-family: Verdana">&nbsp; <span style="font-size: 7.5pt; font-family: Verdana">Tue, 12 Aug '08<p>&nbsp;</p></span></span></strong></h2><h2 style="background: white"><strong><span style="font-size: 9pt; font-family: Verdana">Hints Strongly At Regulating Private Planes<p>&nbsp;</p></span></strong></h2><span style="font-size: 9pt; font-family: Verdana"><a title="http://www.aero-news.net/index.cfm?ContentBlockID=0b145ee8-62c8-4f1b-9677-657c70ffabbd#d#d" href="http://www.aero-news.net/index.cfm?ContentBlockID=0b145ee8-62c8-4f1b-9677-657c70ffabbd#d#d" /></span><a title="http://www.aero-news.net/index.cfm?ContentBlockID=0b145ee8-62c8-4f1b-9677-657c70ffabbd#d#d" href="http://www.aero-news.net/index.cfm?ContentBlockID=0b145ee8-62c8-4f1b-9677-657c70ffabbd#d#d"><img title="http://www.aero-news.net/index.cfm?ContentBlockID=0b145ee8-62c8-4f1b-9677-657c70ffabbd#d#d" height="32" src="cid:image001.gif@01C8FC8E.37C23850" width="100" align="left" border="0" /></a><span style="font-size: 9pt; font-family: Verdana"><a title="http://www.aero-news.net/index.cfm?ContentBlockID=0b145ee8-62c8-4f1b-9677-657c70ffabbd#d#d" href="http://www.aero-news.net/index.cfm?ContentBlockID=0b145ee8-62c8-4f1b-9677-657c70ffabbd#d#d" /></span><span style="font-size: 9pt; font-family: Verdana">Either the Transportation Security Administration has found evidence that small planes really are a security threat, or the airline industry has called in a marker somewhere to fight competition from general aviation.<p>&nbsp;</p></span><span style="font-size: 9pt; font-family: Verdana">USA Today reports the TSA plans a massive expansion of aviation security that for the first time will regulate thousands of private planes now flying with no security rules.<p>&nbsp;</p></span><span style="font-size: 9pt; font-family: Verdana">Despite the facts that automobiles are the overwhelming vehicle of choice for bomb-minded terrorists -- and a small plane has never been used in such an attack -- TSA is bringing its solution in search of a problem. Michal Morgan, TSA head of general aviation security, says about 15,000 small aircraft and 4,700 airports they frequent will now come under his agency's watchful eye.<p>&nbsp;</p></span><span style="font-size: 9pt; font-family: Verdana">Measures are expected to include checking flight crew backgrounds, parking planes in secure areas and inspecting the planes themselves. So far, TSA is only talking about planes over 12,500 pounds, and there's been no word yet on whether passengers will be screened.<p>&nbsp;</p></span><span style="font-size: 9pt; font-family: Verdana">Aviation-security consultant Glen Winn told the paper there is a legitimate security hole which must be addressed. &quot;There's a huge window that's open, and I do believe they've got to close that,&quot; said Winn... who, notably, is a former chief of security for United Airlines.<p>&nbsp;</p></span><span style="font-size: 9pt; font-family: Verdana">While GA and business aviation groups cross their fingers and hope the plan will be workable, one bizav vendor says there may actually be an upside. Eric Byer is head of government affairs for the National Air Transportation Association, which represents companies that service business jets. He says the new security rules will be a little bit of an inconvenience, but might draw some passengers who now are worried about private planes.<p>&nbsp;</p></span><span style="font-size: 9pt; font-family: Verdana">&quot;Having a program like this will make (private planes) even more secure,&quot; he said.<p>&nbsp;</p></span><span style="font-size: 9pt; font-family: Verdana">And, of course, if the TSA crackdown makes the non-flying public feel safer, it will have achieved it's real goal... regardless of any actual benefits.<p>&nbsp;</p></span><span style="font-size: 12pt"><p>&nbsp;</p></span>]]></description>
         <link>http://bizjetsecurity.com/blog/2008/08/tsa_once_again_targets_general.html</link>
         <guid>http://bizjetsecurity.com/blog/2008/08/tsa_once_again_targets_general.html</guid>
         <category></category>
         <pubDate>Thu, 14 Aug 2008 22:54:21 +0000</pubDate>
      </item>
            <item>
         <title>EBACE 2008: Call for “sensible”business security</title>
         <description><![CDATA[<span style="font-size: 12pt; color: #666666; font-family: Verdana">Chief executive of the British Business and General Aviation Association (BBGAA) Guy Lachlan is calling for a change in security regulations for the business aviation community.<br /><br />Speaking before this afternoon&rsquo;s session on EU and US security developments Lachlan said: &ldquo;As an industry we need to ensure people run secure operations, but that their flexibility is not compromised. We need to implement a sensible scheme. Generally, either the owner or the corporation hiring the aircraft knows who the passengers are on board.<br /><br />&ldquo;People flying in the aircraft tend to be friends or colleagues. If we created something like a &lsquo;known traveller programme&rsquo;, we could provide better data on the people on board. This could mean simplified screening at the point of departure with sensible checks to make sure people getting on are who they say they are.&rdquo; <br /><br />He points out there is no point taking cutlery off an aircraft if someone one on board is seated next to the crash axe, mandated by law to be on board. The same principle applies to screening hand baggage if someone has access to their other luggage throughout the journey. The BBGAA is working with the European Council of General Aviation Support and the European Business Aviation Association to create a known traveller scheme<p>&nbsp;</p></span><span style="font-size: 12pt"><p>&nbsp;</p></span>]]></description>
         <link>http://bizjetsecurity.com/blog/2008/05/ebace_2008_call_for_sensiblebu.html</link>
         <guid>http://bizjetsecurity.com/blog/2008/05/ebace_2008_call_for_sensiblebu.html</guid>
         <category></category>
         <pubDate>Fri, 23 May 2008 00:01:50 +0000</pubDate>
      </item>
            <item>
         <title>Countering Threats: Securing Business Aircraft</title>
         <description><![CDATA[<h2><span>As bizjet security concerns mount in today's troubled environment, a ready market has emerged for wares ranging from wheelwell sensors and surveillance cameras to missile protection systems.<br /></span></h2><h3><span>Kim Rosenlof<br /></span></h3><table cellspacing="3" cellpadding="0" width="154" align="right" border="1"><tbody><tr><td><strong>At A Glance <br /></strong>Corporate aircraft security touches on many flavors. This article touches on: <br /><ul><li><span>Wheelwell and door systems; <br /></span></li><li><span>Cameras and radar; <br /></span></li><li><span>Missile defense systems; and <br /></span></li><li><span>Secure data link. <br /></span></li></ul></td></tr></tbody></table>Two business jets of the same make and model owned by two different companies sit next to each other on a lonely airport ramp in a remote country. While eating lunch at the hotel restaurant a few miles away, the pilots of one jet receive an alert on their UHF transceiver. They use the transceiver to interrogate the aircraft and discover that the left wheelwell sensor detected an intrusion. This could still be just a cat or a bird, but after the alert sounds for the eighth time in 24 minutes, the pilots decide that something's wrong. Returning to the airplane, they don't see anything out of the ordinary, so they turn on the aircraft power to check out the systems, and a stream of fluid pours out of the left wheelwell. Subsequent investigation revealed that a mechanic &quot;borrowed&quot; an hydraulic hose fitting from their plane to fix the other company's jet. <br />Sounds like a crazy scenario? According to <a href="http://www.planecrashinfo.com/">www.planecrashinfo.com</a>, approximately 8 percent of fatal aircraft crashes between 1950 and 2004 were caused by aircraft tampering or sabotage. And according to Securaplane founder, Richard Lusko, a scenario similar to the one introducing this article actually happened to a Securaplane customer. <br />&quot;Wheelwells are an area of concern because a lot goes on in there,&quot; says Lusko, who founded the Tucson, Ariz.-based aircraft security system company in 1988. &quot;It's an easy place to plant a 5-pound [2-kg] bomb or to tamper with the aircraft.&quot; <br />The Securaplane 500 Aircraft Electronic Security System uses DO-160C-compliant passive infrared (IR) sensors with temperature compensation to detect human intrusion in wheelwells, plus a customizable number of ruggedized, all-metal magnetic reed switches for door or panel detection. Each reed switch comprises two ferromagnetic blades encapsulated in a non-ferromagnetic metal body. When the magnet on the door or panel pulls away from the airframe-mounted switch as it is opened, the switch blades spring into an open position, triggering the alarm. A control display unit (CDU) mounted in the aircraft cabin allows the crew to arm, disarm and interrogate the system. The CDU also stores up to 1,600 events, including arm/disarm times, and intrusion times, locations and duration. <br />Currently the aircraft crew receives intrusion alerts from up to 10 miles [16 km] away--depending on terrain and line of sight availability--through the system's UHF transceiver. The transceiver also can be used to arm, disarm and interrogate the system. Securaplane plans to launch a GSM version to allow pilots to receive alerts and interrogate the aircraft through GSM-enabled cell phones or personal digital assistants (PDAs) by the second quarter of 2006. <br />According to Mike Anderson, director of avionics for authorized Securaplane installer, Garrett/Piedmont Hawthorne/Associated, typical areas receiving IR protection include wheelwells, engine cowlings, the avionics bay and cargo bays. Magnetic reed switches protect doors and easily removable access points, such as inspection panels. &quot;One of the criteria we use [for determining where to place sensors] is whether somebody can get into the area fairly easily,&quot; Anderson says. &quot;A panel that's attached with a Zeus fastener, where someone can get access fairly quickly, do something and then close it back up fairly quickly--that's what we want to protect. If a panel has 200 screws holding it down, we don't worry about that.&quot; <br /><strong>Adding Cameras</strong> <br />Although some customers are happy with sensor-only security systems, many choose to add one or more cameras to their system. According to Lusko, cameras often fill several roles, including safety, security and in-flight entertainment. <br />&quot;Part of the configuration of the camera system is to allow the crew to see the main and nose landing gear,&quot; Lusko says, noting that the cameras help the crew verify the gear are down and locked on landing. And on larger aircraft, the cameras determine wheel positions in relation to the tarmac and lighting fixtures during taxi. &quot;That same video can be piped to the cabin for in-flight entertainment, and [the same camera can be] used as part of the security system when the security system is armed.&quot; For the cockpit view, the signal can be mapped to a T-display (showing the three sets of landing gear) on any video-capable multifunction display. <br />Other customers prefer to install security systems consisting completely of cameras. UK-based AD Aerospace specializes in aircraft video security on a wide range of aircraft from airliners to large corporate jets. Its FlightVu Defender system, developed for the corporate aviation market, consists of up to eight cameras that use video motion detection (VMD) technology to provide comprehensive peripheral coverage of the aircraft on the ground. <br />&quot;For a Gulfstream or a Global Express you'd typically use four or five cameras mounted throughout the airplane,&quot; says John Dolan, vice president of business development for AD Aerospace. &quot;[The system] might even use an underbelly quad-pack, which is a 360-degree view camera pod.&quot; <br />Available in both color and monochrome, and in both overt and covert body styles, Defender cameras use VMD to compare frames, looking for any difference between one frame and the next. Differences constitute movement, which in turn may trigger an alarm. Alarm video signals are fed to the onboard digital video recorder, where they are digitized, compressed and stored on a removable hard drive. The hard drive stores approximately 10 hours of data with an update rate of 12 pictures per second. Pilots can review the stored video on the ground via an Ethernet connection from a laptop or through the aircraft's in-flight entertainment system containing the IP-addressable FlightVu video server. <br />&quot;We developed the first commercially available servers for airplanes about 10 years ago,&quot; Dolan says. &quot;[We offer] a 10/100T-base interface that's 100 percent Ethernet-compliant with a very friendly, user-oriented, graphical user interface [GUI].&quot; <br />Defender also can be configured to transmit the alarm video signals via a low-power, frequency-hopping spread spectrum microwave link to an antenna stationed at a hangar or terminal building. Pilots or other flight department personnel can then remotely access the video images via modem with a laptop or personal computer. Text messaging using a short message service (SMS) also can be employed to alert pilots of alarms. <br />The system also can be used in conjunction with AD Aerospace's other FlightVu products for additional safety and security. These include the FlightVu Witness closed circuit television camera system for in-flight cabin and cockpit security, CargoVu for larger aircraft with cargo holds, and FlightVu Spectator for in-flight entertainment. <br /><strong>Reducing False Alarms</strong> <br />Despite their ability to indicate that an aircraft has been compromised, security systems can present a burden to the pilots who have to respond to the alarms. Because wheelwell sensors cannot tell the difference between a cat and a human, and video cameras cannot tell the difference between a lineman walking past the aircraft and a terrorist approaching the aircraft, pilots often have to respond to false alarms. <br />To reduce the number of false alarms, Securaplane is introducing a range controlled radar (RCR) sensor that can be configured to scan a defined radius and ignore any readings past the specified distance. &quot;It's actually a miniature radar using very low power and yet [is] very effective,&quot; Lusko says. &quot;We can set [the RCR] at any limit we want--3 feet, 5 feet, 4 feet [0.9, 1.5, 1.2 m]--and it doesn't see beyond that. So this is a breakthrough in security.&quot; <br />The $1,800 RCR, expected by March of 2006, also will be more cost-effective than traditional IR cameras, which start at $20,000 per camera, according to Lusko. Securaplane currently is developing an underbelly pod that will include four RCR sensors and a GSM transmitter. Pilots will be able to view, on a GSM-enabled cell phone or PDA, a graphic of the intruder's path around the airplane, including any place the intruder stopped. Lusko expects the pod to be available in late 2006. <br />A critical concern regarding security systems is the amount of power they consume on the tarmac. Security systems cannot draw on aircraft batteries and must run on their own emergency supplies. Using mainly low-power magnetic reed sensors drawing a few mA each, the Securaplane 500 system can last for five to seven days on its BP-550 power communications unit and for seven to 10 days if an additional BP-650 battery pack is installed. Adding the RCR would only draw another 4 to 5 mA, compared with a standard camera's 180 mA. <br /><strong>Missile Defense <br /></strong>While the majority of corporate operators are satisfied with camera and sensor-based aircraft security systems, a select few are worried about threats of a decidedly more sinister nature--shoulder-fired missiles. Although a number of companies have developed or are developing onboard anti-missile defense systems for military and commercial aircraft, BAE Systems' AN/ALQ-204 Matador infrared countermeasure (IRCM) system is available as a factory-installed option on Gulfstream G300, G400, G500 and G550 aircraft. <br />The Matador protects against heat-seeking surface-to-air missiles (SAMs) by using an infrared lamp to present a false target to lure the missile away. &quot;The missile tries to lock onto a heat source, and the [aircraft engine] exhaust is the place where it wants to lock,&quot; says Matador program manager Scot Chebin. &quot;The Matador provides a false target, away from the aircraft, that's hotter than the exhaust's heat signature. This deters the missile from hitting the airplane.&quot; The Matador requires little pilot attention. Once the pilot engages the system, usually during taxi procedures, the Matador continuously projects the false target to protect the aircraft. At altitude the pilot can leave the system on, turn it off or put it in standby mode, depending on the area of the world in which the aircraft is flying. <br />Although the Matador system was first developed more than 20 years ago for the U.S. military and has seen action in a number of conflicts, its $2.25-million price tag and approximately 200-pound [91-kg] weight penalty deterred civilian customers until the late 1990s, when several countries began requesting the system for their heads of state aircraft. Since 1999, nine heads of state flying nine different aircraft platforms have installed the Matador system. <br />However, although Gulfstream offers the unit as an option, the U.S. State Department has not yet released the technology for public use, meaning corporate aviation customers currently are not allowed to purchase the Matador option. BAE Systems is working with the State Department to obtain a release for its first corporate customer, and expects to obtain the go-ahead, with certain restrictions, by the end of the year. <br />&quot;Before 9/11 there really wasn't a reason for [the Matador] to be offered in the commercial marketplace,&quot; says Bill Emerson, BAE Systems business development director. &quot;Now we're looking at the terrorist threat in a changed world. We're making the technology available to business jet operators now because there's a need in a post-9/11 environment.&quot; <br />Although it also is currently available only to military customers, a Compact Airborne Early Warning and Control (CAEW&amp;C) system has been developed by Israel Aircraft Industries' Elta System Group for the Gulfstream 550. Elta's CAEW&amp;C system includes phased array radar, phased array identification friend or foe (IFF), signal intelligence (SIGINT) and a communications system with a data link and satcom system. <br /><strong>Securing Communications</strong> <br />Taking security one step farther, Honeywell International recently flight tested an existing communications management unit (CMU) loaded with new cryptographic software to send and receive secure data link messages via the airborne communications addressing and reporting system (ACARS). In addition to protecting messages from interception by unauthorized individuals, the new Secure ACARS software was designed to achieve the following: <br /><span>&middot;</span><span>&nbsp; Compress transmitted message size by up to 30 percent, <br /></span><span>&middot;</span><span>&nbsp; Use cryptographic integrity algorithms to ensure messages are not corrupted, and <br /></span><span>&middot;</span><span>&nbsp; Authenticate messages to assure the recipient that the message is from a legitimate source. <br /></span>&quot;Currently, individuals with inexpensive radio scanners and freeware available through the Internet are able to monitor unsecure ACARS message transmissions,&quot; says Frank Daly, president of Honeywell Commercial Electronic Systems. &quot;Flight plans and other sensitive information can be intercepted easily, and in many cases computer enthusiasts retrieve and post such information on the Internet for anyone to see.&quot; <br />Although the U.S. Air Force cofunded the development of the Secure ACARS technology, Honeywell plans to make the system available for commercial and business aircraft operators in early 2006. <br /><span /><p>&nbsp;</p>]]></description>
         <link>http://bizjetsecurity.com/blog/2008/05/countering_threats_securing_bu.html</link>
         <guid>http://bizjetsecurity.com/blog/2008/05/countering_threats_securing_bu.html</guid>
         <category></category>
         <pubDate>Thu, 22 May 2008 23:53:37 +0000</pubDate>
      </item>
            <item>
         <title>US warns of &apos;heightened risk&apos; of terror strike in China</title>
         <description><![CDATA[<strong><span style="font-size: 15pt; line-height: 120%; font-family: Arial">US warns of 'heightened risk' of terror strike in China <p>&nbsp;</p></span></strong><span style="font-size: 9pt; color: #999999; line-height: 120%; font-family: Arial">Fri Apr 25, 7:19 PM ET</span><span style="font-size: 10pt; line-height: 120%; font-family: Arial"> <p>&nbsp;</p></span><span style="font-size: 10pt; line-height: 120%; font-family: Arial">WASHINGTON (AFP) - The US government on Friday warned Americans traveling to <span style="cursor: hand"><span class="yshortcuts">China</span></span> of a &quot;heightened risk&quot; of a terrorist attack in the Asian country &quot;in the near future.&quot; </span><span style="font-size: 7.5pt; text-transform: uppercase; color: #999999; line-height: 120%; font-family: Arial"><p>&nbsp;</p></span><span style="font-size: 7.5pt; text-transform: uppercase; color: #999999; line-height: 120%; font-family: Arial"></span><span style="font-size: 10pt; line-height: 120%; font-family: Arial">&quot;Any large-scale public event such as the upcoming <span class="yshortcuts"><span style="background-position: 0% 0%; background-attachment: scroll; cursor: hand">Olympic Games</span></span> (in August) may present an attractive target for terrorists,&quot; the State Department said in an updated travel alert.<p>&nbsp;</p></span><span style="font-size: 10pt; line-height: 120%; font-family: Arial">&quot;There is a heightened risk that extremist groups will conduct terrorist acts within China in the near future,&quot; it said.<p>&nbsp;</p></span><span style="font-size: 10pt; line-height: 120%; font-family: Arial">The warning was issued as Interpol chief Ronald Noble told a security conference on the Games in <span class="yshortcuts"><span style="cursor: hand">Beijing</span></span> that it was possible &quot;<span class="yshortcuts"><span style="background-position: 0% 0%; background-attachment: scroll; cursor: hand">Al-Qaeda</span></span> or some other terrorist group will attempt to launch a deadly terrorist attack&quot; there.<p>&nbsp;</p></span><span style="font-size: 10pt; line-height: 120%; font-family: Arial">The State Department said that given the increased risk, Americans traveling in China &quot;are advised to use caution and to be alert to their surroundings at all times, including at hotels, in restaurants, on public transportation and where there are demonstrations and other large-scale public gatherings.&quot;<p>&nbsp;</p></span><span style="font-size: 10pt; line-height: 120%; font-family: Arial">Chinese authorities have increased security in the country's airports in recent months in light of the security concerns, it said.<p>&nbsp;</p></span><span style="font-size: 10pt; line-height: 120%; font-family: Arial">&quot;For example, Chinese airport authorities recently implemented tighter restrictions on taking liquids, aerosols, or gels aboard flights in carry-on baggage,&quot; it said.<p>&nbsp;</p></span><span style="font-size: 10pt; line-height: 120%; font-family: Arial">In a previous travel warning in March, the State Department said the threat of terrorism appeared to be minimal, but urged caution nonetheless.<p>&nbsp;</p></span><span style="font-size: 10pt; line-height: 120%; font-family: Arial">&quot;The threat level for terrorism against Americans in China remains low. However, any large-scale public event like the upcoming Olympic Games could become the focus of terrorist acts or other forms of violence,&quot; it said.<p>&nbsp;</p></span><span style="font-size: 10pt; line-height: 120%; font-family: Arial">&quot;There is no reason to believe that US citizens are being targeted at this time,&quot; it said at the time.<p>&nbsp;</p></span><span style="font-size: 10pt; line-height: 120%; font-family: Arial">The <span class="yshortcuts"><span style="background-position: 0% 0%; background-attachment: scroll; cursor: hand">Olympic Summer Games</span></span> will take place from August 8-24, followed by the Beijing Paralympic Summer Games 2008 from September 6-17.<p>&nbsp;</p></span><p>&nbsp;</p>]]></description>
         <link>http://bizjetsecurity.com/blog/2008/05/us_warns_of_heightened_risk_of.html</link>
         <guid>http://bizjetsecurity.com/blog/2008/05/us_warns_of_heightened_risk_of.html</guid>
         <category></category>
         <pubDate>Thu, 22 May 2008 23:51:19 +0000</pubDate>
      </item>
            <item>
         <title>Testimony of Secretary Chertoff</title>
         <description><![CDATA[<h1 style="margin: auto 0in"><a name="content" />Testimony of Secretary Michael Chertoff before the House Committee on Homeland Security</h1><p>Release Date: September 5, 2007</p><h2 style="margin: auto 0in">Introduction</h2><p>Cannon House Office Building<br />(Remarks as Prepared)</p><p>Chairman Thompson, Ranking Member King, and Members of the Committee: I appreciate the opportunity to testify today about the progress of our efforts to secure our homeland.</p><p>Before I continue, let me acknowledge the partnership between our Department and your Committee. Given the reality of rapidly evolving threats from terrorism and other dangers, our Department must respond creatively and comprehensively, but it cannot do it alone. It is only through your assistance in the legislative arena that we can continue to thwart the plans and strategies of our enemies in our post-September-11 world.</p><p>So let me take a moment to thank you for passing legislation that enhances the security of our Visa Waiver Program, protects people who report suspicious activity or behavior to the authorities, and allows for greater amounts of state Homeland Security grants to be distributed on a risk basis.</p><p>Next Tuesday will mark the sixth anniversary of the September 11 attacks. We will honor the memory of those who died that day, and remember in particular the heroic actions of those who gave their lives to save thousands of their fellow Americans.</p><p>On September 11, 2001, no one could have predicted the passage of six years without further attacks on our homeland.</p><p>By any measure, this is a remarkable achievement. It is the result of our comprehensive efforts to secure our safety, while maintaining our liberty and way of life, including our privacy. It is a tribute to the successes of our armed forces abroad and to our law enforcement efforts at home. It is a testament to our Customs and Border Protection (CBP) officers in keeping dangerous individuals and groups away from our country, to our Immigration and Customs Enforcement (ICE) personnel in removing those who got in, to our Coast Guard in protecting our ports and waterways, and to our Transportation Security Administration in the guarding of our airports and transit networks. It highlights the importance of improved information sharing across Federal agencies, and between Washington and our states and localities. It bears witness to the benefits of integration within our own Department. It is the result of the tireless efforts of our federal partners in homeland security, including the Department of Justice, the FBI and the Department of State. It underscores the importance of our relationship with Congress and particularly with this Committee.</p><p>Yet despite this accomplishment, our nation remains at risk. Clearly, our terrorist foes continue to plot against us and target our people and infrastructure. Over the past year, we helped disrupt a number of planned attacks, notably the plot last summer in London to hijack planes heading for America.</p><p>The good news is that these plots were thwarted. The more sobering news is that, these operational successes notwithstanding, the terrorist threat remains a potent one. This is further evidenced by the results contained in the July 2007 National Intelligence Estimate. According to the NIE report, America faces a continued threat from ideologically driven terrorist networks like Al Qaeda, which, while weaker than it was on 9/11, is growing again in strength. Moreover, we cannot discount the danger posed by homegrown terrorists, isolated individuals or groups that initiate their own plots after becoming radicalized.</p><p>The risks we confront continue to evolve and the potential targets across our nation are numerous indeed. If we tried to eliminate every risk, we would obviously fail. Moreover, we would become so heavy-handed with security, we would end up destroying exactly what we are trying to protect -- the normal, daily fabric of life across our nation.</p><p>So instead of trying to eliminate risk, our overarching strategy is to reduce and manage it. Risk management lets us identify what should concern us most in terms of threats, existing vulnerabilities, and potential consequences.</p><p>Our risk management philosophy drives all that we do. Accordingly, my testimony will refer to it frequently. I will focus on both our successes and our challenges. Mostly I will discuss threats that are man-made, but I will also note the challenges we face from nature. I will summarize what we have achieved over the past year, highlight what we aim to accomplish this year and for the future, and suggest how Congress can help us in these critical efforts to secure our nation.</p><h2 style="margin: auto 0in">A Year of Achievements</h2><p>Last year, our Department formulated five specific goals to help us advance our mission of securing our homeland. These five goals include protecting America from dangerous individuals, protecting it from dangerous things, protecting our critical infrastructure, building a 21st century emergency response system and a culture of preparedness, and strengthening and unifying DHS operations and management.</p><p>I want to talk about this past year's achievements in the context of these five goals or priorities.</p><h2 style="margin: auto 0in">1. Protecting Against Dangerous People</h2><p>The first of these priorities deals directly with individuals who seek to enter this country and do us harm.</p><p><strong>Expanding our Perimeters/Intercepting Our Enemies Overseas</strong></p><p>In response to this threat, our strategy begins by expanding our perimeters so that America&rsquo;s actual borders are not our first line of defense. Our aim is to intercept dangerous enemies abroad, before they reach our borders.</p><p>In order to do this, we need relevant information about travelers. To that end, this July, we reached a Passenger Name Record (PNR) agreement with the European Union in which the EU agreed to continue to provide our Department access to pertinent data from airliners on passengers taking transatlantic flights to and from the EU. We also collect this information on arrivals from other regions as well.</p><p>And just last month, responding to a recommendation of the 9/11 Commission, we &nbsp;enhanced our Advanced Passenger Information System (APIS) by publishing a final rule requiring international air and sea carriers to provide Customs and Border Protection (CBP) passenger manifest information prior to boarding, rather than when planes are already in flight, and cruise ships are underway.</p><p>Obviously, our PNR and APIS initiatives work in tandem. With both of these types of information, combined with the Automated Targeting System for Passengers, we have identified overseas passengers who have posed a real danger and prevented them from entering our country.</p><p>Since 9/11, PNR data have helped us significantly in combating potential threats.</p><p>In April 2006, at Boston&rsquo;s Logan Airport, CBP officers used PNR information to identify two passengers whose travel patterns exhibited high-risk indicators. During the secondary interview process, one subject stated that he was traveling here on business for a group that is suspected of having financial ties to Al Qaeda. The examination of his baggage revealed images of armed men, one of them labeled &ldquo;Mujahadin.&rdquo; Both passengers were refused admission.</p><p>PNR and APIS will help us identify previously known overseas enemies before they can board a plane bound for our country and fingerprinting can also be useful in this process. Under our US-VISIT program, millions of non-citizens arriving here through ports of entry have their fingers scanned and then checked against the fingerprints we have from prior entries and their visa records in order to make sure that they are to whom the visa was granted and they&rsquo;re not felons or terrorists.</p><p>But what about detecting unknown enemies? Recently, we&rsquo;ve taken a quantum leap forward and are poised to identify them for the first time. We are transitioning to 10-print collection, which we will run not only against databases of known dangerous individuals, but also against those we&rsquo;re collecting from battlefields, safe houses, and terrorist training camps around the world. This creates a powerful deterrent against any terrorist seeking to enter our country from any of these places.</p><p>Through our US-VISIT program, we&rsquo;re also continuing to run terrorist and criminal watch list checks, often across multiple databases maintained by separate agencies. Our goal is to ensure that US-VISIT is interoperable with the FBI fingerprint database. We&rsquo;re integrating our watch lists and recently we created the Traveler Redress Inquiry Program&nbsp; (DHS TRIP) to enable people who have been mistakenly placed on such lists to petition to be removed from them.</p><p><strong>Secure Identification</strong></p><p>Through PNR, APIS, and US-VISIT&rsquo;s 10-fingerprint initiative, we now have critical new or enhanced tools to help us identify lethal enemies -- including those previously unknown -- from among the numerous travelers who arrive from overseas.</p><p>But what do we do about enemies who deliberately masquerade as legitimate passengers? We address the critical need for secure travel documentation.</p><p>The 9/11 Commission spoke directly to this issue when it wrote these words, &ldquo;[S]ources of identification are the last opportunity to ensure that people are who they say they are and to check whether they are terrorists.&rdquo;</p><p>The Commission put it well when it added, &ldquo;For terrorists, travel documents are like weapons.&rdquo;</p><p>Indeed, when we investigated the 9/11 attacks, we discovered that 18 of the 19 perpetrators had been issued U.S. identification documents and that some of these documents had been obtained fraudulently.</p><p>Fraudulent documents are undeniably a growing problem. Since 2005, our CBP officers have intercepted more than 90,000 fraudulent documents and apprehended more than 60,000 people trying to enter our country with such documents.</p><p>Our CBP officers must wade through nearly 8,000 different kinds of travel documents we currently accept at our land border. There is no way these officers can quickly or effectively tell whether those documents are real or fraudulent. Obviously, this puts our nation at risk.</p><p>In response to this problem, in January of this year, we implemented our rule for the air travel portion of the Western Hemisphere Travel Initiative. WHTI requires people traveling to and from Canada, Mexico, the Caribbean, and Bermuda to present a passport or other approved identification document in order to enter or re-enter the United States. Secure documents are a national imperative that will prevent dangerous people from entering our country using fraudulent identification. WHTI will enhance our ability to assess threats and confirm identity at ports of entry, while continuing to facilitate lawful travel and commerce.</p><p>In June of this year, we published the proposed rule for WHTI&rsquo;s land and sea portion.</p><p><strong>Border Security</strong></p><p>Over the past year, we have continued our efforts to secure our homeland by taking strong steps to secure our land borders.</p><p>Since President Bush took office, our nation has added 5,000 new Border Patrol Agents, bringing the current total to more than 14,000. By the end of 2008, we will have more than 18,300, double the number we deployed before 2001.</p><p>Moreover, as part of <strong><em><u>Operation Jump Start</u></em></strong>, thousands of National Guard members have been deployed to the southern border since June of last year. Up to 3,000 Guard members will continue this operation through July of next year.</p><p>We have also been putting more infrastructure in place. Today we have nearly 113 miles of fencing and 112 miles of vehicle barriers have been erected along the southern border. By the end of the current fiscal year, we expect to have 150 miles of fencing in place.</p><p>Besides adding more boots on the ground and more infrastructure, last year we abolished the practice of catch-and-release at the border and replaced it with catch-and-remove. We ended the practice in which non-Mexican aliens who were first apprehended were then let go after receiving a notice to appear in court. They are now being detained for as long as it takes to send them back to their home countries.</p><p>Recently, we awarded the contract for SBInet, the high-tech component of our border security efforts. It includes the building of a virtual fence with a full array of ground-based radar, cameras, and unmanned aerial systems. Through Project 28 in Arizona, we are in the process of deploying and validating the first 28 miles of what will be another key element in our border security strategy.</p><p>Building the virtual fence should fuel the progress we&rsquo;ve been witnessing at the border, chiefly the decline in illegal border crossings, since launching our other initiatives. Over the past fiscal year, overall apprehensions by our Border Patrol have fallen by 20%. Northern border apprehensions have declined by 7%, while southwestern border apprehensions have dropped by 21%. Moreover, Border Patrol OTM apprehensions are down 39%. Yuma Sector apprehensions have plunged by 68%, Del Rio Sector apprehensions by 48%, and El Paso Sector apprehensions by 40%.</p><p>A recently released Pew research report concurred that apprehensions have been declining since the second quarter of last year. The study also indicated that foreign-born Hispanic employment showed the smallest increase since mid-2003. And it revealed that after rising steadily for several years, the growth in remittances to Mexico slackened markedly in mid-2006 and the rate of remittance growth diminished through the first quarter of this year. Taken together, these measures strongly suggest that cross-border migration from Mexico continues to decline significantly.</p><p><strong>Interior Enforcement</strong></p><p>As mentioned, our battle to protect America from dangerous individuals begins overseas. It does not, however, end at our land borders. It is the job of our ICE agents and officers to ensure that those who have succeeded in crossing our border illegally, including those who pose a threat to our security, are apprehended and removed to their home countries. In fiscal year 2006, ICE removed a record 198,511 illegal aliens from the country.</p><p>Over the past year, we have stepped up our efforts to hold employers accountable for illegally hiring some of these individuals. Indeed, ICE has made 3,942 administrative arrests and 790 criminal arrests in worksite enforcement cases this year alone.</p><p><strong>E-Verify</strong></p><p>Most employers do not want to hire illegal workers. To help them avoid doing this inadvertently, we have a voluntary program, called E-Verify, that lets them check the work status of their new hires online. This system compares information from the I-9 Employment Verification form, which establishes work eligibility, against the Social Security Administration and DHS immigration databases. The system is quick, easy, and free and more than 21,000 employers rely on it.</p><p>Last month, we announced our intent to expand this successful system. Beginning on October 1, 2007, all federal departments and agencies must begin verifying new hires through E-Verify. We also are encouraging contractors in enroll in E-Verify. In addition, we plan to modify our Homeland Security Acquisition Manual to include a vendor&rsquo;s participation in E-Verify as a consideration during the DHS procurement evaluation process. Finally in order to prevent document fraud and identity theft, E-Verify will include a photo screening tool. This tool will work by allowing an employer to check the photo on the &nbsp;Employment Authorization Document or Permanent Resident Card presented by their new hire against the photo DHS has for that document from the 14.8 million photo images stored in DHS immigration databases.</p><p><strong>SSN/No Match</strong></p><p>As part of our announcement about expanding and enhancing E-Verify, we also issued a final regulation that outlines specific steps employers should take upon receiving a &ldquo;no-match&rdquo; letter from the Social Security Administration informing them of an employee whose name and Social Security Number do not match government records. There can be many causes for a no-match, including clerical errors and name changes. One potential cause might be a submission of information for an alien who isn&rsquo;t authorized to work in the U.S. and who may be using a false Social Security number or a Social Security number assigned to someone else.</p><p>This regulation is currently in litigation and we are defending it vigorously.</p><p><strong>Legal Immigration</strong></p><p>Thus far, we&rsquo;ve focused on how we&rsquo;re enforcing our immigration laws so we can secure our borders and protect our country. Through our U.S. Citizenship and Immigration Services (USCIS), we are also committed to creating a more efficient, effective process for those who are seeking to come here legally.</p><p>By the end of September of last year, USCIS reached a tremendous milestone. Its caseload backlog dropped to less than 10,000 from a high of 3.8 million cases in January 2004. In addition, over the past year, it developed and implemented a new fee schedule which will give it the necessary resources to process more than 7 million immigration cases annually.</p><p><strong>Thoughts on Immigration Reform</strong></p><p>No summary of our progress in protecting America from harmful individuals would be complete without some brief comments on the comprehensive immigration reform bill that stalled in the U.S. Senate.</p><p>The failure of the Senate bill to become law meant the defeat of a number of vital, constructive provisions. I want to focus on two of them that could have strengthened our efforts to protect our country from its enemies.</p><p>The first of these was the Temporary Guest Worker Program (TWP), which would have established a steady, legal, temporary channel of workers whose skills were in demand by our economy. The second provision sought to deal with the 12 million people who were already here illegally. Those who arrived prior to January 1 of this year and were willing to step out of the shadows, obey the law, and pay a penalty, would have been granted a work visa, renewable after four years, and an opportunity to return to their home country four years later after the first renewal and apply for a &nbsp;green card.</p><p>Both provisions would have freed our immigration enforcement officers to focus more of their time and effort on apprehending violent criminals, drug traffickers, gang members, and potential terrorists who pose an immediate threat to this country and its people.</p><h2 style="margin: auto 0in">2. Protecting Against Dangerous Things</h2><p>As we guard our homeland against threats from individuals, we are simultaneously working to protect it from dangerous cargo. Here, too, we employ a layered approach to security. Our strategy is to keep out dangerous goods by creating rings of protection around our ports of entry and throughout our maritime supply chain, from point-of-origin abroad to point-of-destination here.</p><p><strong>An Expanding Perimeter: Overseas Measures</strong></p><p>Our outermost security layer is overseas. </p><p>One step we've taken is to create a public-private and international partnership with more than 7,000 businesses, including most of the largest U.S. importers. Through our Custom-Trade Partnership Against Terrorism, or C-TPAT, we are reviewing the security practices not only of companies that ship goods, but also those that provide them with services. Our goal is to inculcate a security-consciousness among firms that are involved at every point in the supply chain.</p><p>As of the last fiscal year, C-TPAT participants, combined with Importer Self-Assessment (ISA) participants, accounted for almost half of all import value and 31% of all entries. </p><p>With respect to the cargo itself, we employ risk-based targeting, where we use an automated targeting system to screen 100% of U.S.-bound containers prior to their arrival here. This is done by collecting information about every incoming shipment 24 hours prior to the container being loaded at a foreign port. This information includes content, manifest, shipping history, and other data. We have made great progress, in partnership with industry and trade groups, toward obtaining additional data elements that will enhance the targeting systems. Through our Container Security Initiative or CSI, CBP officers, working with port officials, examine this information in order to identify those high-risk containers that require further inspection. These efforts underscore the necessity of a layered, risk-based approach to global supply chain security.</p><p>Over the past year, we have expanded our CSI program. By the end of this year, CSI will be active in more than 58 overseas ports, covering 85% of U.S.-bound cargo.</p><p>In our efforts to detect dangerous cargo overseas, we remain particularly concerned about nuclear terrorism, specifically about a radiological or nuclear device -- or the material needed to make one - entering our country. </p><p>Since 9/11, our Department, the Department of Energy, Department of State, and other interagency partners have taken significant steps in conjunction with the private sector and our overseas allies to counter this lethal threat to maritime commerce.</p><p>We have done so with the vital cooperation of Members of Congress, who earlier last year passed the SAFE Port Act to further institutionalize these efforts.</p><p>In order to build on these efforts, last December, we launched our Secure Freight Initiative. Under this initiative, the U.S. government is placing radiation detection equipment, imaging machines, and optical character readers at terminals in an initial set of seven foreign ports. Three of these ports will scan 100% of the cargo coming to this country, fulfilling the requirements of the SAFE Port Act. Operation testing on a more limited basis will take place at the four remaining locations, providing us information on how we can address the security challenges associated with larger and more complex ports. </p><p>The goal of the Secure Freight Initiative is to allow us to identify radiological or nuclear threats well in advance of a container's arrival to our country. It will provide host governments with greater visibility into potentially dangerous shipments moving across their territory. It will help carriers, shippers, and terminal operators have greater confidence in the security of cargo they move and unload. And by applying our risk management and reduction strategy, it will help resolve threats in a way that keeps safe cargo moving.</p><p><strong>Protecting Against Dangerous Cargo At Home</strong></p><p>Our layered approach against the threat of nuclear terrorism starts with such overseas measures as the Secure Freight Initiative and continues at our U.S. ports, where we've been significantly expanding our radiation detection capabilities. </p><p>Earlier this year, we reached a milestone in that we now have installed 1,000 Radiation Portal Monitors (RPMs) at major seaports and land ports of entry across the nation. </p><p>In just two years, we've more than doubled the percentage of incoming containerized cargo being scanned for radiological and nuclear threats at our land borders (from 40% to 97%) and more than quadrupled that percentage at seaports (from about 20% to 91%). By the end of next year, we will scan nearly 100% of inbound cargo containers for such deadly material. </p><p>And to help us reach this goal, we are continuing to test what we expect to be the next generation of scanning technology -Advanced Spectroscopic Portals, or ASP. The ASP program is designed to automatically distinguish between naturally occurring radioactive material and dangerous nuclear material that actually poses a threat. </p><p>These advanced systems are not only meant to provide enhanced detection capabilities, but also to improve the efficiency of the scanning process. Currently, when a container activates an alarm, our CBP officers must examine the container and the enclosed material to determine whether it poses a threat or is a legitimate import with naturally occurring radiation. It is our hope that ASP technology will reduce false alarms and increase the flow of commerce through our ports, while enhancing security.</p><p>ASP systems remain promising. Our next step will be to complete additional field testing and other rigorous certification measures in busy environments. Once we are done, we will report back to Congress with our results before doing a full-scale procurement. </p><h2 style="margin: auto 0in">3. Protecting Critical Infrastructure</h2><p>Dangerous individuals and goods pose a continued threat to our homeland in fundamental ways. One way is by putting our nation's critical infrastructure at risk.</p><p><strong>Passenger Planes</strong></p><p>The September 11th attacks underscored how much damage dangerous individuals can inflict by getting control of passenger planes. </p><p>Since 9/11, we have taken substantial steps to improve aviation security, while maintaining the efficiency of air transportation for the traveling public. Highly trained Transportation Security Officers screen passengers and baggage at airports across the country. Federal Air Marshals protect hundreds of domestic and international flights every day. We have hardened cockpit doors, armed pilots to defend the flight deck, and strengthened air cargo security.</p><p>Nonetheless, the disruption in August 2006 of the London plot to blow up U.S.-bound transatlantic planes serves as a stark reminder that the threat to air travel remains. Due to this crisis and other events occurring in the United Kingdom, our Transportation Security Administration (TSA) increased Federal Air Marshal deployment to the U.K. as well as other foreign destinations. TSA has also deployed Visible Intermodal Protection and Response (VIPR) Teams to increase security at passenger rail and mass transit locations. </p><p>Responding to that threat and to a 9/11 Commission recommendation, last month I announced our Secure Flight rule that would transfer responsibility for watch list checks from the airlines to TSA. </p><p>Under this rule, if implemented as proposed, TSA will receive limited passenger information from airlines as early as 72 hours before a flight, check it against the watch list provided by the Terrorist Screening Center, and transmit the results back to aircraft operators. In the case of a watch list match, TSA will have time to coordinate the appropriate action, including, if necessary, preventing a person from boarding the plane.</p><p>Essentially, this takes an already-existing security measure - comparing passenger information against the terrorist watch list - and streamlines the process by giving this responsibility to TSA rather than dozens of different air carriers. This will ultimately enhance security, create a more consistent and uniform pre-screening process, and reduce potential misidentification issues for passengers.</p><p>What this will not do is harm privacy, use commercial data, assign a risk score to passengers, or predict behavior. </p><p>TSA will only collect the minimum amount of personal information necessary to conduct effective watch list matching and prevent misidentification. </p><p>We have also issued a Privacy Impact Assessment and Privacy Act System of Records Notice that outlines how TSA collects, uses, stores, protects, and retains personally identifiable information as part of the Secure Flight Program. </p><p>In addition, our Traveler Redress Inquiry Program - or DHS TRIP - is available for passengers who feel they have been improperly delayed or prohibited from boarding an aircraft. </p><p>We will test this system and work with the travel industry, airlines and other stakeholders in the development of the Secure Flight program and will take public feedback during the comment period. </p><p>Our concern about passenger planes is not limited to the problem of dangerous people boarding them. We are also focused on the risk of dangerous cargo entering them. Last year, we issued a new air cargo regulation that mandates 100% inspection of passenger parcels that are presented at airport counters. We also put in place stricter inspection requirements for air cargo shippers and indirect carriers.</p><p>In the next fiscal year, we plan to invest $56 million to fund 300 air cargo inspectors, K9 teams and technology which will allow us to track carriers, shippers, and support risk-based air cargo screening across the entire supply chain.</p><p><strong>Sector-Specific Plans/NIPP</strong></p><p>Passenger planes are an integral part of our transportation system, which under Homeland Security Presidential Directive 7 is one of the 17 sectors that comprise our critical infrastructure. </p><p>Each of these 17 sectors is different, with its own unique needs, risks, and interdependencies. </p><p>The private sector, not the federal government, owns and operates most of this infrastructure. Government and the private sector must work together to set goals and priorities, identify key assets, assign roles and responsibilities, target resources, and measure our progress against national priorities.</p><p>In June of last year, we released the National Infrastructure Protection Plan (NIPP) to provide an overarching framework. The NIPP is our unifying structure for understanding and managing risk to the nation's infrastructure - created in partnership with the private sector.</p><p>A critical part of the NIPP includes the Sector Specific Plans, which drill down to the sector level and provide the nuts and bolts of how each of the 17 critical sectors identifies key assets, develops and implements protective programs, and measures progress.</p><p>In May of this year, we saw the completion of all 17 Sector Specific Plans of the NIPP. It represents the first time in our nation's history that the government and the private sector have come together on such a large scale - literally, across every major sector of our economy - to develop a joint plan to protect key assets and resources.</p><p>The goals of the Sector Specific Plans are to define roles and responsibilities within each sector, catalog existing security authorities, institutionalize security partnerships already in place; and set clear goals and objectives to reduce risk.</p><p>The completion of the Sector Specific Plans is a tremendous milestone for our Department, the private sector, and the American people.</p><p>Of course, a plan is only as good as its implementation. We look forward to continuing our work with our private sector partners as we work under these plans to manage the risk to critical infrastructure.</p><p><strong>Chemical Security</strong></p><p>Let me focus on our progress in protecting one of our 17 sectors, the chemical sector.</p><p>One of the things we are most concerned about are industrial chemicals being used as weapons - whether through an attack against a chemical facility or an attack against chemicals in transit.</p><p>We must tackle this challenge comprehensively. That means securing not only chemical sites and facilities, but chemicals in transit. It means securing the end points of the system as well as the links in between. </p><p>The vast majority of chemical shipments do not pose a threat to people. In fact, less than one percent of all shipments traveling by rail are Toxic by Inhalation (TIH), which means if attacked, they could create an airborne hazard and endanger a lot of people.</p><p>For this reason, last December we put forward a proposed regulation to reduce the standstill time for rail cars carrying TIH hazards around our major cities. This regulation formalizes a set of agreements we've reached with rail carriers to make sure that the relatively small number of cars that carry TIH chemicals on a given day are not left unattended, can be efficiently tracked, and take the safest, most economically practicable route. </p><p>This is risk management in action: targeting the highest-risk chemicals and working with industry to demonstrably reduce that risk without breaking the system. </p><p>In April of this year, we published an interim final chemical facility security rule. We are now enforcing that regulation, which, for the first time, sets national risk-based standards for chemical security. </p><p>Facilities that fail to meet our performance standards could face penalties of up to $25,000 for each day a violation occurs, or they could be ordered to halt operations until security is brought up to a level that meets certain performance standards.</p><p>I am confident that most chemical plants will accomplish what we need to get done in the area of security. That is because this industry understands that investments in security help protect its operations. </p><p>Ultimately, chemical security is not solely a federal responsibility; it is a shared responsibility, not just among federal, state and local governments, but also with the private sector. </p><p><strong>Field Applications: HITRAC, JFK Plot Detection/Disruption, Hurricane Scenarios Analysis</strong></p><p>No discussion of critical infrastructure protection would be complete without talking about how we are applying our capabilities to actual threats. </p><p>One way is through the Homeland Infrastructure Threat and Risk Analysis Center (HITRAC), a shared program between our National Protection and Programs Directorate (NPPD) and our Office of Intelligence and Analysis (I&amp;A). Through HITRAC, we are improving information sharing by developing three new product lines tailored to meet the intelligence needs of the private sector and state and local governments, including sector-specific documents, unclassified communication with the private sector and quarterly suspicious activity reporting analyses.</p><p>Last June, through information sharing and close coordination between DHS and the FBI, as well as with pipeline owners, the U.S. government was able to announce the thwarting of an alleged plot to attack the fuel tanks and pipelines at New York's JFK Airport. During the investigation, we were able to identify vulnerabilities that might be targeted by the plot.</p><p>Another application of our strengthened critical infrastructure capability concerns threats posed by natural disasters. We now have an enhanced capacity to map out the various scenarios of a predicted hurricane making landfall in a particular area. We have strengthened our ability to predict the probable effect on existing infrastructure of hurricanes of various categories, enabling us to tailor our disaster responses accordingly.</p><p>We are also continuing to strengthen the security of our cyber infrastructure. </p><h2 style="margin: auto 0in">4. Building an Effective Emergency Preparedness and Response System</h2><p>As we work to protect our critical infrastructure by preventing disasters from occurring, we must also ensure that our nation is well-prepared to respond to disasters - natural as well as man-made - when they do occur. We are reminded of this as we reflect on the recent second anniversary of Hurricane Katrina.</p><p><strong>Improving Interoperable Communication Among First Responders</strong></p><p>When it comes to disaster preparedness and response, one of our most important priorities at DHS is interoperable communications. This refers to the ability of first responder agencies - whether fire, police, or emergency medical services - to communicate during an emergency or disaster. Interoperability means having radios and other devices that can talk to each other, protocols and procedures for communication, and clear lines of authority.</p><p>Improving interoperable communications is a subject that the 9/11 Commission discussed in its final report and said must be a priority for all levels of government.</p><p>Much progress has been made since 9/11 to achieve tactical, command-level interoperability in our major high-threat urban areas. Over the past two years, DHS has assisted 75 urban or metropolitan areas in developing and exercising tactical interoperable communications plans. Our Interoperable Communications Technical Assistance Program has been instrumental throughout this process.</p><p>Through our Public Safety Interoperable Communications (PSIC) grant program, which we will co-administer with the Department of Commerce, we will provide an additional $1 billion in interoperability grants by the end of 2007. By the end of this year, DHS will have provided over $4 billion to state and local governments to develop interoperable communications. We are requiring that each state and territory submit a communications plan by December 1 to ensure eligibility for the PSIC grants.</p><p>And in April of this year, our new Office of Emergency Communications began operations in accordance with the Homeland Security Act of 2002. Its job is to improve interoperable communications for our public safety partners and across federal, state, and local governments. </p><p>A good example of a region with effective interoperable communications is right here in the National Capital Region. Today, all first responders in this region - whether in Maryland, DC, or Virginia - are able to communicate with each other. Fire fighters and police not only can talk to each other within the same jurisdiction, they can communicate across jurisdictions.</p><p>So how is the rest of the country faring on interoperability?</p><p>Last December, we released the findings of our national baseline survey, the first-ever nationwide assessment of interoperability across our country. </p><p>We found that roughly two-thirds of emergency response agencies across the nation use interoperable communications at varying degrees. Specifically, response agencies tend to be more developed in their use of technology; interoperability at local levels tends to be more advanced than it is between state and local agencies; and law enforcement, fire response and EMS agencies reported similar levels of development in most areas of interoperability.</p><p>In January of this year, we issued interoperability scorecards to 75 urban and metropolitan areas that looked at three things: governance, standard operating procedures, and equipment. </p><p>Overall, the scorecard findings show that urban and metropolitan areas have made progress in improving their interoperable communications capabilities. The findings also identify gaps and areas for continued advancement. Key findings include:</p><ul><li class="MsoNormal" style="margin: 0in 0in 0pt; mso-margin-top-alt: auto; mso-margin-bottom-alt: auto; mso-list: l0 level1 lfo1; tab-stops: list .5in">Policies for interoperable communications are now in place in all 75 urban and metropolitan areas. </li><li class="MsoNormal" style="margin: 0in 0in 0pt; mso-margin-top-alt: auto; mso-margin-bottom-alt: auto; mso-list: l0 level1 lfo1; tab-stops: list .5in">Regular testing and exercises are needed to effectively link disparate systems to allow communications between multi-jurisdictional responders (including state and federal). </li><li class="MsoNormal" style="margin: 0in 0in 0pt; mso-margin-top-alt: auto; mso-margin-bottom-alt: auto; mso-list: l0 level1 lfo1; tab-stops: list .5in">Cooperation among first responders in the field is strong, but formalized governance (leadership and strategic planning) across regions needs further improvement. </li></ul><p>One particular urban area that scored well in our survey was Minneapolis/St. Paul. That area's capability and training were put to good use in delivering a prompt response to the recent collapse of the I-35 bridge.</p><p>We are confident that by the end of 2008, all 75 of our country's largest urban areas, 50 states, and 6 U.S. territories will have demonstrated a minimum level of emergency response interoperable communications, thus fulfilling a major post-9/11 national goal.</p><p><strong>FEMA: Reorganization, New Leadership, Enhanced Capabilities</strong></p><p>Besides improving interoperable communications among our nation's first responders, we are also committed to continued progress in the way our own Department deals with emergency preparedness and response through FEMA. </p><p>While Congress mandated changes to FEMA's organizational structure, we have made modifications to create a more nimble, better equipped organization. FEMA now includes the U.S. Fire Administration, the former Office of Grants and Training, the Chemical Stockpile Emergency Preparedness Program, the Radiological Emergency Preparedness Program, and the Office of National Capital Region Coordination. </p><p>We have created an Office of Health Affairs outside of FEMA to coordinate the Department's medical preparedness efforts. This office will work closely with FEMA and all of our component organizations as well as our external partners such as Health and Human Services. </p><p>We have created the National Protection and Programs Directorate to unify our infrastructure protection, risk-management, cyber security and communications, and US-VISIT border management functions. </p><p>FEMA is no longer stove-piped into Response and Recovery Divisions. It now has new Directorates of National Preparedness and Disaster Operations which will focus on long-term preparedness and response planning. It also has robust Logistics Management, Disaster Assistance, and Disaster Operations Directorates. </p><p>We have also strengthened FEMA's 10 regional offices, led by regional administrators who work directly with state and local emergency management communities. All 10 regional directors are now in place. </p><p>Ultimately, FEMA's success is tied to the relationships it builds within FEMA regions with emergency managers and state and local communities. In this regard, under the new structure, we now have a National Advisory Council to serve as an avenue for our partners to provide input into the Department's policies and programs, and we will create Regional Advisory Councils to work at a regional level.</p><p>Of course, we must continue to implement the National Incident Management System (NIMS) to ensure a common framework for emergency response across our country. We all have to be on the same page when disaster strikes. Over the next two years, we will continue to work to strengthen the NIMS and to work for its full adoption. </p><p><strong>USCG Deployable Operations Group (DOG)</strong></p><p>In addition to FEMA, the U.S. Coast Guard continues to play a vital role in the building of a 21st century emergency response system. Two years ago, in response to Hurricane Katrina, the Coast Guard helped save over 33,000 lives, a remarkable feat. </p><p>Over the past year, we have strengthened the Coast Guard's capabilities by creating a Deployable Operations Group (DOG) consisting of six Coast Guard elements: the National Strike Force, Port Security Units, Maritime Safety and Security Teams, Tactical Law Enforcement Teams, Naval Coastal Warfare Personnel, and Maritime Security Response Teams. </p><p>Each of these elements has unique capabilities, including search and rescue, hazmat, biological and chemical response, counterterrorism, law enforcement, and port security expertise. By bringing them under a single command and training them for rapid deployment in any environment, we are strengthening our ability to respond effectively to any disaster. Moreover, by coordinating this group with other DHS assets, such as FEMA Search and Rescue teams, ICE officers, and CBP agents, we can create an efficient, tailored, DHS-wide response to any incident.</p><h2 style="margin: auto 0in">5. Strengthen and Unify DHS Management</h2><p>If we are to strengthen our ability to protect America from disasters and to respond effectively when they happen, we must continue to improve our own internal operations at DHS.</p><p><strong>Integration</strong></p><p>When our component agencies entered the department on March 1, 2003, we faced one of the greatest integration challenges of modern times. The Department effectively had 22 separate human resources offices, 8 payroll systems, 19 financial management centers, and 13 procurement systems.</p><p>We have made remarkable progress to integrate these functions. We are working to consolidate 17 major data centers into just two. This will give us robust, resilient data management and save millions of taxpayer dollars.</p><p>Of course, a Department of our size must have straightforward, transparent, and well-managed contracting and procurement practices and vehicles. Otherwise, we are leaving the door open to fraud, waste and abuse.</p><p>We have implemented two programs that will help make sure our IT procurement and contracting houses are in order - FirstSource and EAGLE. FirstSource consolidates our IT portfolio and establishes Department-wide contracts for commodity purchases. EAGLE will allow our agencies and components to meet their IT needs on a competitive and as-needed basis, rather than ad-hoc or through large, wasteful contracts. </p><p>To coordinate all of this work and ensure the prudent annual investment of over $3 billion in information technology, it is essential to have a strong Chief Information Officer who is empowered to make decisions, control spending, and ensure consistency.</p><p>In March of this year, we issued a management directive elevating the authority of our Department's Chief Information Officer. By doing so, DHS will be at the forefront of fulfilling the promise of the Clinger-Cohen Act of 1996 which established the role of the CIO at major federal agencies.</p><p>Each DHS component will be required submit its IT budget to the CIO, who will make recommendations to me for final inclusion in the Department's budget request. </p><p><strong>Ensuring Excellence and Diversity in the Workplace</strong></p><p>Besides having an integrated Department, we must continue to recruit and maintain a first-class homeland security workforce.</p><p>One way of measuring our progress is by looking at vacancy rates in critical areas of our Department. DHS is clearly on track to fill all vacant positions in mission-critical occupations this fiscal year. As of last month, the vacancy rate was 2.92% for frontline occupations in CBP, 8% at ICE, and 4.3% at FEMA.</p><p>In July of this year, the Majority Staff of this Committee issued a report claiming that&nbsp; 24% of our Department's top-level executive positions were vacant, but this percentage was artificially inflated due to OPM's recent authorization of 73 new SES positions. Without the 73 new positions, the vacancy rate for top positions would only be 12%. Moreover, even when we include the OPM authorization, the vacancy rate has already fallen to 22% as of last month. In addition, 97 of 125 vacant positions are in the process of being filled. </p><p>In addition, several of our component agencies have active minority recruitment programs, including the Coast Guard, Secret Service, Customs and Border Protection, and the Transportation Security Administration, among others. We continue to seek minorities and students from Historically Black Colleges and Universities (HBCUs). We are also entering partnership agreements with the Black Executive Exchange Program (BEEP) of the Urban League, the National Association of Hispanic Federal Executives (NAHFE, and the Hispanic Scholarship Fund Institute. We are pursuing the services of an executive search firm with a proven record in attracting and recruiting people from diverse backgrounds for executive positions.</p><p>In addition, our Science and Technology Directorate's University Centers of Excellence program has partnered with three HBCUs to conduct vital homeland security-related research and to educate the next generation of homeland security experts and scholars. </p><p>Since our inception, we have made a commitment to provide opportunities for small businesses to participate in our procurement program, including those small businesses owned by minorities, women, disabled veterans, veterans, and those located in economically distressed areas. </p><p><strong>Transition Planning</strong></p><p>Along with promoting integration and workplace diversity and excellence, we also continue to implement our plans to ensure our Department's transition to the next administration in January 2009. </p><p>As we have seen recently in the U.K., terrorists seek to exploit any perceived weakness that may occur during a period of government transition. DHS simply cannot afford to have a &quot;down period&quot; between the end of this administration and the start of the next.</p><p>So we are establishing detailed continuity plans, and ensuring protocols and procedures are in place for the next leadership team. But more importantly we're training and cross-training our senior career employees to ensure that each component and office within DHS has capable leadership ready to take the reins as new appointees adjust to their positions.</p><h2 style="margin: auto 0in">Goals for This Year and the Future</h2><p>As we look to the future, we are determined to continue advancing the priorities of our Department in fulfillment of our homeland security mission. Rather than providing an exhaustive list, I'd like to cite a few key examples of how we intend to build on the past year's accomplishments as outlined in this testimony.</p><p><strong>1. WHTI Implementation and REAL ID</strong></p><p>As I noted, if we wish to secure our homeland, secure documentation is essential. That's why we will continue to move forward on our Western Hemisphere Travel Initiative. As I mentioned, in January of this year, we implemented our air travel rule and this June, we announced the proposed rule for WHTI's land and sea portion. </p><p>As early as the summer of 2008, we will start to require WHTI-compliant credentials - a passport, PASS card, a NEXUS card, or other acceptable documents as defined in the final rule. We will provide at least 60 days notice before final implementation.</p><p>Since this is a significant change, we are going to be reasonable and flexible in implementing the WHTI provisions. We're taking a phased approach that will allow people to get the necessary documents and adjust to the requirements. And we're also making accommodations for children and groups of minors crossing the border, as well as members of our armed forces, round-trip cruise ship passengers, and first responders. </p><p>And as part of WHTI, we are also working with the states to develop an enhanced driver's license. Since they will serve as an alternative to a passport or passport card at land and sea borders, enhanced driver's licenses will only be issued to U.S. citizens. They must also incorporate the technology that DHS specifies in order to aid the legitimate movement of travelers. </p><p>Our goal is to make enhanced driver's licenses fulfill the requirements of REAL ID. More then two years ago, Congress had passed the REAL ID Act in response to the 9/11 Commission's recommendation that the federal government &quot;set standards for the issuance of&hellip;.sources of identification, such as driver's licenses.&quot;&nbsp; Secure driver's licenses are essential for secure identification. </p><p>Last March, in accordance with the REAL ID Act, I announced a rule that proposed specific minimum standards for state-issued driver's licenses and identification cards to be accepted for federal purposes, such as air travel.</p><p>Under these standards, applicants for driver's licenses would need to bring documents to their state DMV office for the purpose of validating five things: their identity, date of birth, legal status in the United States, Social Security number, and address. </p><p>The DMV offices would take photos of applicants, scan or copy the documents the applicants are providing, and then go through a common-sense process of verifying the accuracy or legitimacy of the information contained in those documents. </p><p>Now as for the licenses themselves, we proposed standards for the states to ensure that the REAL ID licenses being produced would be hard to tamper with, counterfeit or duplicate for fraudulent purposes. </p><p>And finally, we wanted to ensure that drivers couldn't hold multiple licenses in multiple jurisdictions, so our rule would require that each state check to make sure that no other state already had licenses issued to them. </p><p>Personal privacy will be protected by states issuing REAL ID driver's licenses. Our proposal requires that each state conduct name-based and fingerprint-based criminal history record checks on DMV employees who will be involved in REAL ID in relevant ways.</p><p>Through REAL ID, we're not only preserving people's privacy but strengthening it. By improving the quality of our ID documents, we're protecting against one of the fastest growing crimes in America today - the crime of identity theft. There is no greater violation of privacy than when criminals gain total access to personal information in the process of stealing someone's identity. In the same vein, REAL ID should also offset the cost of reissuing new licenses through the savings that people will realize by the reduction of identity theft crimes.</p><p>When we announced the REAL ID rules in March, we said that states which seek justifiable extensions and timetables will have through December 31, 2009 to come into compliance. </p><p>We believe that delay in implementing REAL ID could be detrimental to our national security. In the National Intelligence Estimate that was released in July, it clearly states that Al Qaeda will &quot;intensify&quot; its efforts to put operatives inside our country. Clearly, time waits for no one and neither do our enemies. Across the nation, the American people support the creation of secure driver's licenses and other forms of identification that cannot be exploited or forged by terrorists. Our states have an obligation to their people to respond to what the 9/11 Commission recommended and what this Congress affirmed. They have a duty to help us repair the security gaps that were so tragically exploited on 9/11 by implementing REAL ID as quickly as possible.</p><p><strong>2. Border Security</strong></p><p>I also testified about how we are securing our homeland by strengthening our border security. As I mentioned, as part of that commitment, we will have more than 18,000 Border Patrol agents by the end of 2008, double the number we had before 2001. By the end of next year, we also intend to ensure that there are 370 miles of fencing along our southern border, 300 miles of vehicle barriers, three additional UAVs, and 105 camera and radar towers. We will also work to <strong>ensure that 1,700 more Border Patrol Agents and an additional UAV are added in 2009.</strong> </p><p><strong>3. General Aviation and Small Vessels</strong></p><p>When I discussed earlier how we are working to protect our infrastructure from dangerous people and cargo, I mentioned passenger planes. We need to address these issues. </p><p>Accordingly, this month, we are publishing a Notice of Proposed Rule Making that proposes new passenger screening requirements for private aircraft entering into and departing from the United States. Currently we only receive very basic information from private aircraft entering the U.S. These proposed requirements would bring private aircraft into closer alignment with the passenger screening requirements that currently apply to commercial air carriers under CBP'S APIS regulation and allow inspectors more time to fully pre-screen travelers and crews and take necessary actions to resolve threats, whether that means denying entry into U.S. airspace, re-routing an aircraft, or meeting the aircraft upon arrival. </p><p>We are also concerned about four potential security threats with regard to the more than 17 million small boats, ranging from commercial enterprises to passenger ferries to canoes and personal watercraft.</p><p>First, we're concerned about their use to smuggle weapons, including a weapon of mass destruction, into our country. Second, we're concerned about their use as a water-borne improvised explosive device, a use which was actually deployed in 2000 through al-Qaeda's attack on the U.S.S. Cole. Third, we want to prevent the use of a small vessel to smuggle dangerous people into our country. And finally, we're concerned about these boats being used as launching pads for an attack on the maritime industry or on critical infrastructure.</p><p>Now how do we defend against these threats?&nbsp; The short answer is by applying the same risk-management, partnership, and layering principles I've already outlined. </p><p>Through the various initiatives I've already discussed, we are indeed making strides in protecting our ports from these kinds of threats. But we also need to consider measures that are specifically geared to small vessels. </p><p>We need such measures to enhance protection and yet balance our need for freedom of movement, privacy, and economic vitality.</p><p><strong>4. Fusion Centers</strong></p><p>If we're going to progress in our efforts to protect people and critical infrastructure across our nation, we need to concentrate more on how we share accurate, timely, actionable intelligence, particularly with state and local governments. To that end, we are increasing our participation in state and local fusion centers (SLFCs). Our goal is to help build a national fusion center network.</p><p>In June of last year, I designated our Office of Intelligence &amp; Analysis (I&amp;A) as the Executive Agent to manage a program that is designed to advance our SLFC mission. Last month, this program was codified the law implementing the 9/11 Commission's recommendations. </p><p>We are now working with the Department of Justice and other members of the Information Sharing Council to gather and assess responses provided by every state and major urban-area fusion center to a capacity assessment of fusion centers. To date, DHS has assessed 25 Fusion Centers, 13 of them in the past year. We plan on conducting assessments at 10 more centers in fiscal year 2008.</p><p>Based on the results of the assessments and other factors, DHS has deployed 17 intelligence officers to 17 State Fusion Centers as well as to major city or regional centers in New York City, Los Angeles, and Dallas. DHS plans to have officers in as many as 35 sites by the end of fiscal year 2008. </p><p><strong>5. Continued Integration</strong></p><p>And finally, if we want to meet our goals in the coming years, it is essential that we continue our efforts to build a unified, integrated Department of Homeland Security. </p><p>Through our OneNet program, we are consolidating seven legacy Wide Area Networks into a single Departmental network. OneNet will give us a secure, standard platform to facilitate information flow and streamline our IT infrastructure. We expect to complete OneNet integration by October 2008.</p><p>Under HSPD-12, we are also creating a single, tamper-proof smartcard for all DHS employees. And we have put in place a plan to transition the Department's headquarters to a single campus over the next ten years.</p><p>One of the key benefits of a fully integrated Department is the ability to apply joint doctrine, planning, training and exercising across our agencies. </p><p>As mentioned earlier in my testimony, over the past year, our U.S. Coast Guard created from six of its teams a single Deployable Operations Group which combines their search and rescue, hazmat, biological and chemical response and other capabilities and trains their members for rapid deployment in the event of a disaster. We intend to make this a model throughout our Department as we seek to apply fully the benefits of integration. </p><p>And we also intend to keep moving forward on our National Strategy for Maritime Security. Issued in September 2005, it seeks to align federal government maritime security programs into a comprehensive national effort involving federal, state, local, and private sector entities. The eight supporting plans address the specific maritime threats and challenges. For example, the October 2005 Maritime Operational Threat Response (MOTR) plan describes the U.S. government's plan to respond specifically to maritime terrorism threats or incidents, including the roles and protocols of the various agencies, and the need for additional planning. </p><p>Clearly, a unified, integrated DHS is essential to the security of this nation. Earlier this year, it was a unified, integrated DHS that worked with our international partners to ensure an appropriate response to the London/Glasgow vehicle-borne IED attacks.</p><h2 style="margin: auto 0in">Conclusion</h2><p>Since its inception more than four years ago, our Department has worked hard to fulfill its mission of protecting our homeland. While challenges remain, from terrorism to natural disasters, we have made our country safer and our people more secure. </p><p>From the beginning, we have understood that we cannot fulfill our mission alone. That is why we continue to value our partnerships, including our relationship with Congress. Indeed, Congress has been invaluable in helping us advance our goals and will remain a key partner in the months and years to come.</p><p>Members of Congress have played a vital role in many areas. We appreciate their efforts to help us reorganize FEMA. Now it is time to let a reorganized FEMA do its job. </p><p>We are grateful for their passage of REAL ID. Now it is time to consider passage of other critical 9/11 Commission recommendations, including Congressional oversight reform, as well as legislation authorizing us to regulate potentially hazardous chemicals such as chlorine.</p><p>I want to thank this Committee and Members of Congress again for their support and I look forward to our working together in the future to fulfill our mandate on behalf of this nation and its people.</p><p>This page was last modified on September 5, 2007</p><p>&nbsp;</p>]]></description>
         <link>http://bizjetsecurity.com/blog/2007/09/testimony_of_secretary_chertof.html</link>
         <guid>http://bizjetsecurity.com/blog/2007/09/testimony_of_secretary_chertof.html</guid>
         <category></category>
         <pubDate>Sun, 16 Sep 2007 22:14:50 +0000</pubDate>
      </item>
            <item>
         <title>Corporate Security Program</title>
         <description><![CDATA[&nbsp; <div id="interiorbodycontent"><h1>The John Jay Leadership Academy in Corporate Security program </h1><p class="insidetestimonial">As companies continue to expand in a global market and world events shape our protection strategies, we must build organizational resiliency, manage change more rapidly, have intricate knowledge of our companies' business direction and develop effective programs to safeguard our organizations.</p><p class="insidetestimonialsrc">- Paul DeMatteis, CPP, CFE<br />Senior Advisor on Corporate Security Programs<br />John Jay College of Criminal Justice<br /><br /></p><h2>Are you prepared for tomorrow's corporate security challenges?</h2><p>Today many corporate security professionals are evaluated on business skills as well as security expertise. They must know about organizational structure, global business concepts, marketing, and corporate direction. Benefits from a well structured and integrated corporate security program are often not effectively presented to senior management. We are competing for corporate dollars slated for ventures that have the potential to bring revenue to the organization. To ensure our companies are adequately protected we need to develop the most effective concepts, strategies and business skills to prove return on investment and compete for budget and staff resources.</p><p>You will take away from the program the ability to blend business and security skills, enhancing the security programs of your organizations and advancing your personal career goals.</p><hr /><h1>Who Should Attend</h1><ul class="bull"><li>A security professional preparing to play a more senior role in his or her organization </li><li>A law enforcement or military professional transitioning into a second career </li><li>A business professional responsible for security functions or interested in integrating security concepts into his or her organization </li><li>A graduate student seeking professional experience </li></ul><hr /><h1>Inaugural Session and Testimonials</h1><p class="insidetestimonial">&quot;We're a research institution. Our faculty are some of the eminent academic scholars in this area.&quot;</p><p class="insidetestimonialsrc">- Jeremy Travis, President, John Jay College</p><h2>List of panelists at Inaugural Session</h2><p>On November 8, 2006 John Jay College of Criminal Justice welcomed members of the corporate security community for a seminar and panel discussion entitled &quot;Lessons Learned and Future Challenges for Corporate Security and Business Leaders.&quot; The event was part of an initiative launched by the College and its Leadership Academy for Corporate Security to explore the changing security imperatives of the private sector in the years following September 11, 2001. In his opening remarks, President Jeremy Travis encouraged guests to think of John Jay as a &quot;clearinghouse&quot; for information on best practices, proven approaches to safety, and cost-benefit analyses of particular strategies.</p><p><strong><a title="blocked::http://www.jjay.cuny.edu/ocps/jjleadership/about.html#harvey" href="#harvey">Peter Harvey</a></strong>, a partner in the law firm of Patterson Belknap Webb &amp; Tyler and a former New Jersey Attorney General, gave the keynote address. The panelists represented senior security and the academic community.</p><ul><li><span class="name"><a title="blocked::http://www.jjay.cuny.edu/ocps/jjleadership/about.html#geraci" href="#geraci">Mark Geraci</a></span>, CPP, Senior Director, Corporate Security, Bristol - Myers Squibb </li><li><span class="name">Tom Slade</span>, Senior Director of Security, Museum of Natural History </li><li><span class="name">Robert McCrie</span>, CPP, Professor of Security Management, John Jay College of Justice </li><li><span class="name"><a title="blocked::http://www.jjay.cuny.edu/ocps/jjleadership/about.html#cosenza" href="#cosenza">John Cosenza</a></span>, Managing Partner, BizJet Security </li><li><span class="name">Robert Littlejohn</span>, Vice President, Global Security, Avon </li><li><span class="name">Kevin Hallinan</span>, Senior Vice President&acirc; Major League Baseball </li><li><span class="name"><a title="blocked::http://www.jjay.cuny.edu/ocps/jjleadership/about.html#dematteis" href="#dematteis">Paul DeMatteis</a></span>, CPP, Senior Adviser on Corporate Security Programs, John Jay College of Justice </li></ul><hr /><a name="harvey"></a><p class="insidetestimonial">&quot;We must be creative in the way we approach security. The biggest danger is complacency and rote thinking.&quot;</p><p class="insidetestimonialsrc">- Keynote Speaker Peter Harvey, Partner<br />Patterson Belknap Webb &amp; Tyler</p><hr /><a name="geraci"></a><p class="insidetestimonial">&quot;The John Jay Leadership Academy in Corporate Security program is another significant step taken by the College to advance the professionalism of security practitioners at the highest levels. I applaud its concept of providing invaluable business and security related skills to current and future CSOs to help insure they have the knowledge needed to add maximum value to their companies, and be considered an integral part of the business process.&quot;</p><p class="insidetestimonialsrc">- Mark Geraci, CPP, Senior Director-Corporate Security<br />Bristol-Myers Squibb</p><hr /><a name="cosenza"></a><p class="insidetestimonial">&quot;The idea that Corporate Security can exist or operate in a vacuum at any company is not only false but is setting the program and it's managers on a course to disaster. Corporate Security must be viewed in the same light as any other company business unit. Security leadership must establish easy to understand and meaningful metrics for senior management to review. In this effort, it is essential that security leadership team with other business unit heads in order to reach mutual corporate goals. Security leadership should seek out the opinions and support of other managers in order to effectively implement all security programs. This does not mean that security principles should in any way be compromised. In fact, ongoing conversations with business unit heads are a necessary part of gaining consensus for programs and enlisting support for the programs from all employees. Communicating regularly with other managers at various levels is an educational tool so that the company security goals and objectives are fully understood and recognized as vital to company successes. Another benefit of communicating at this level is the endorsement and support that other managers will provide security in acquiring necessary funding and budget for security programs and projects. We have all said that security is everyone's job in the company. Senior level business communications with business heads will only further reinforce this concept within the corporation&quot;</p><p class="insidetestimonialsrc">-John Cosenza, BizJet Security LLC</p><hr /><a name="dematteis"></a><p class="insidetestimonial">&quot;The Leadership Academy's strength comes from the Council members' devotion and determination to prepare students to assume senior leadership roles in our profession and to assist those already established within the profession to meet individual goals.</p><p class="insidetestimonialsrc">- Paul DeMatteis, CPP, CFE<br />Senior Advisor on Corporate Security Programs<br />John Jay College of Criminal Justice</p></div><div id="footer-bottom"><p>555 W. 57th Street, Suite 602, New York, NY 10019<br />Phone: (212) 237-8663 Fax: (212) 237-8609<br /><a title="blocked::mailto:pdematteis@jjay.cuny.edu" href="mailto:pdematteis@jjay.cuny.edu">e-mail: pdematteis@jjay.cuny.edu<br /></a></p></div>]]></description>
         <link>http://bizjetsecurity.com/blog/2007/07/post.html</link>
         <guid>http://bizjetsecurity.com/blog/2007/07/post.html</guid>
         <category></category>
         <pubDate>Fri, 27 Jul 2007 14:05:38 +0000</pubDate>
      </item>
            <item>
         <title>BUSINESS AVIATION SECURITY</title>
         <description><![CDATA[<span class="subheader"><span style="font-size: 8.5pt; font-family: Verdana">By Dave Higdon</span></span><span style="font-size: 8.5pt; font-family: Verdana"><p>&nbsp;</p></span><em><strong><em><span style="font-weight: bold; font-size: 8.5pt; font-family: Verdana">GOING FORWARD WITHOUT MOVING A STEP </span></em></strong></em><strong><em><span style="font-weight: bold; font-size: 8.5pt; font-style: italic; font-family: Verdana"><br /><em><em><span style="font-family: Verdana">Business aviation security issue stagnant </span></em></em></span></em></strong><span style="font-size: 8.5pt; font-family: Verdana"><p>&nbsp;</p></span><span style="font-size: 8.5pt; font-family: Verdana">The bad news for 2007 is that none of the lingering business aviation security issues of 2006 changed significantly in the year just passed. The good news: ditto. <p>&nbsp;</p></span><span style="font-size: 8.5pt; font-family: Verdana">With 9/11 now more than five years past, a sense of unhappy stability seems to rest over the issue of general aviation security and, by extension, business aviation security. All those good-old bad issues of the past five years changed not at all in the past 12 months &ndash; or, if they did, imperceptibly, at best. And from one perspective, that&rsquo;s not a bad thing. <p>&nbsp;</p></span><span style="font-size: 8.5pt; font-family: Verdana">That means no new overtures progressed toward imposing airline-style security systems on the nation&rsquo;s general aviation airports or on business aviation operators. It also means that business aircraft operators well adapted to the status quo don&rsquo;t face new, unfamiliar systems to complicate the job of moving their people from Point A to Point B. <p>&nbsp;</p></span><strong><strong><span style="font-size: 8.5pt; font-family: Verdana">Continuing Efforts </span></strong></strong><span style="font-size: 8.5pt; font-family: Verdana"><br />The Transportation Security Administration renewed funding for its airport-watch hotline and continued to align its airports-security efforts with a revised, renewed Airport Watch Program from AOPA. The 12.5 Security Program remains in effect; the Transportation Security Access Certificate program continues solely as a pilot project for a limited number of airports. <p>&nbsp;</p></span><span style="font-size: 8.5pt; font-family: Verdana">Washington</span><span style="font-size: 8.5pt; font-family: Verdana"> National Airport</span><span style="font-size: 8.5pt; font-family: Verdana"> remains under constraint for privately owned aircraft operators &ndash; not, however, for government operated business aircraft. Progressing in 2005 from complete closure, the past year drew only a relative trickle of traffic to DCA &ndash; no surprise given the expense and logistics of gaining clearance to fly into the signature airport for the Nation&rsquo;s Capital. <p>&nbsp;</p></span><span style="font-size: 8.5pt; font-family: Verdana">And the much-maligned Washington Air Defense Identification Zone remains, at least for now, a perpetually &ldquo;temporary&rdquo; fact of life &ndash; not yet a permanent fixture, as some security authorities would have it. <p>&nbsp;</p></span><span style="font-size: 8.5pt; font-family: Verdana">There&rsquo;s something to be said for the status quo, noted one association executive. &ldquo;We at least know where we stand and how to function under this system,&rdquo; said the official, whose employer prefers he did not to speak for publication. <p>&nbsp;</p></span><span style="font-size: 8.5pt; font-family: Verdana">On another front, however, business interests continue to develop methods for assuring the safety and security of aircraft and airports with an eye toward operators who want to go beyond the best practices endorsed by the TSA. <p>&nbsp;</p></span><strong><strong><span style="font-size: 8.5pt; font-family: Verdana">Where we stand </span></strong></strong><strong><span style="font-weight: bold; font-size: 8.5pt; font-family: Verdana"><br /></span></strong><span style="font-size: 8.5pt; font-family: Verdana">Aviation group executives routinely admonish their members to &ldquo;be careful up there&rdquo; lest an incident draw efforts from those who would greatly restrain private flying. And anytime an accident or incident occurs under unusual circumstances or at a high-visibility locale, the community of private aviators quietly, collectively, holds its breath awaiting the expected fallout. <p>&nbsp;</p></span><span style="font-size: 8.5pt; font-family: Verdana">Such was the case last fall when a baseball pitcher named Cory Lidle died when his Cirrus SR20 crashed into an apartment building on Manhattan&rsquo;s upper-east side. Local &ldquo;experts&rdquo; called for closing the scenic East River corridor that parallels the Island of Manhattan; predictably, Chicago&rsquo;s &lsquo;never-shy&rsquo; mayor, Richard Daily, called for a no-fly zone above his city. <p>&nbsp;</p></span><span style="font-size: 8.5pt; font-family: Verdana">&ldquo;Security concerns&rdquo; accompanied a number of calls for more restrictions on private aircraft use over major metropolitan areas. But New York Mayor &ndash; and active pilot &ndash; Michael Bloomberg voiced the exact opposite sentiment. The National Transportation Safety Board and security authorities quickly determined the crash a tragic accident and the din diminished. Thankfully for private aviators, cooler heads prevailed once again in the aftermath of the Lidle tragedy. But the admonition remains and bears repeating: be extra careful up there. Private aviation&rsquo;s critics are itching for a way to justify their arguments for curtailing flying freedom. They&rsquo;ll seize on anything they can, regardless of how inappropriate, inapplicable or incredulous. <p>&nbsp;</p></span><span style="font-size: 8.5pt; font-family: Verdana">Another area with next to no movement: the Washington ADIZ. A Notice of Proposed Rulemaking (NPRM) to make permanent this highly controversial airspace attracted thousands of negative responses during the comment period and, so far, there&rsquo;s been no further movement. Perhaps the best news is that there is no real new news on this front. Perhaps the worst news: ditto. <p>&nbsp;</p></span><span style="font-size: 8.5pt; font-family: Verdana">The NBAA Security Access Certificate Program, for one, could well be a model for providing access to other sensitive airports &ndash; if it ever moved beyond the demonstration and test phases to a wider system applicable at airports like, say, DCA.<p>&nbsp;</p></span><strong><strong><span style="font-size: 8.5pt; font-family: Verdana">Security starts at the home &ndash; field </span></strong></strong><strong><span style="font-weight: bold; font-size: 8.5pt; font-family: Verdana"><br /></span></strong><span style="font-size: 8.5pt; font-family: Verdana">Guarding against encroachment by hostile people remains, at its root, an effort that starts at home&hellip; or, in the case of private aviation at the home field. The Airport Watch website &ndash; <a title="blocked::http://www.aopa.org/airportwatch/" href="http://www.aopa.org/airportwatch/"><span style="color: #006633">www.aopa.org/airportwatch/</span></a> &ndash; contains a wealth of information on securing airports, hangars, aircraft, student-pilot screening, flight-instructor and flight-school responsibilities in guarding against potential acts of hostility using private aircraft.<p>&nbsp;</p></span><span style="font-size: 8.5pt; font-family: Verdana">Aviators can still report suspicious airport activity via a nationwide hotline, (800) GA-SECURE. A vast majority of the nation&rsquo;s general aviation airports have taken steps to better secure their facilities. <p>&nbsp;</p></span><span style="font-size: 8.5pt; font-family: Verdana">Corporate flight departments following recommendations in the NBAA&rsquo;s Best Practices &ndash; <a title="blocked::http://www.nbaa.org/public/ops/security/bestpractices/" href="http://www.nbaa.org/public/ops/security/bestpractices/"><span style="color: #006633">www.nbaa.org/public/ops/security/bestpractices/</span></a> &ndash; already have created positions to monitor and oversee their internal security efforts. <p>&nbsp;</p></span><span style="font-size: 8.5pt; font-family: Verdana">Ditto for the majority of corporate-oriented FBOs: No longer is it common place for people to drift through the lounge and out onto the ramp without first facing some form of vetting from someone staffing the counter. <p>&nbsp;</p></span><strong><strong><span style="font-size: 8.5pt; font-family: Verdana">Continuing concerns </span></strong></strong><span style="font-size: 8.5pt; font-family: Verdana"><br />Security authorities remain concerned about the potential threat of terrorists chartering an aircraft and commandeering it for nefarious purposes. To that end, the 12.5 Security Program and other efforts &ndash; many of them spawned by NATA&rsquo;s efforts &ndash; have helped charter operators create systems for assuring the identity of their passengers. <p>&nbsp;</p></span><span style="font-size: 8.5pt; font-family: Verdana">But this area remains a concern for TSA and others. Some charter operators and FBOs report that they are periodically &ldquo;probed&rdquo; by people interested in chartering an aircraft for vague purposes, or using unusual forms of payment. Charter operators have even caught members of the media making their own attempts to thwart safeguards in the interest of producing sensational stories highlighting the alleged threat posed by &ldquo;unsecured&rdquo; general aviation operators. <p>&nbsp;</p></span><span style="font-size: 8.5pt; font-family: Verdana">So far, though, the industry&rsquo;s own efforts seem to be working against these attempted encroachments by both law enforcement and media personnel. But vigilance remains the first and main line of defense against these efforts &ndash; and one never really knows when one of those efforts might be something more dangerous than a probing test by security personnel or journalists. <p>&nbsp;</p></span><strong><strong><span style="font-size: 8.5pt; font-family: Verdana">To catch a thief&hellip; </span></strong></strong><strong><span style="font-weight: bold; font-size: 8.5pt; font-family: Verdana"><br /></span></strong><span style="font-size: 8.5pt; font-family: Verdana">The past five years has brought a surge in hardware and systems designed to guard against aircraft theft and the penetration of facilities by unauthorized personnel. We&rsquo;re not going to try to cover the waterfront here, but two new systems came to our attention at the NBAA Convention last year that warrant mentioning. <p>&nbsp;</p></span><span style="font-size: 8.5pt; font-family: Verdana">The first and most ambitious is the WASP Universal Aircraft Tail Number Identification System from TTI Wireless. Based in Louisburg, North Carolina, TTI Wireless created a system that actually records and matches the registration marks on aircraft transiting its surveillance area. <p>&nbsp;</p></span><span style="font-size: 8.5pt; font-family: Verdana">WASP (Wireless Access Surveillance Platform) employs a network of digital-imaging sensors, character-recognition software and a link to a central database that uses the FAA&rsquo;s own registry information for identification of aircraft. The WASP system also employs a link to the law-enforcement network local to airports where it&rsquo;s installed. <p>&nbsp;</p></span><span style="font-size: 8.5pt; font-family: Verdana">In addition to providing alerts and tracking of aircraft movement for security purposes, TTI&rsquo;s WASP system also offers airport operators in other useful areas &ndash; for movement data for use in airport-funding applications, for billing references, even for tracking down violators of local noise-abatement rules. There&rsquo;s more information available at the company&rsquo;s website <a title="blocked::http://www.ttiwireless.com/" href="http://www.ttiwireless.com/"><span style="color: #006633">www.ttiwireless.com</span></a>. <p>&nbsp;</p></span><span style="font-size: 8.5pt; font-family: Verdana">For simply protecting an airplane, the D&amp;K Group of Elk Grove, Illinois, offers a $200 devise designed to assure someone doesn&rsquo;t &ldquo;borrow&rdquo; the company plane &ndash; as happened in October 2005, when a young charter pilot &ldquo;borrowed&rdquo; a Citation from a Florida airport and used it like a teenager joyriding in a &ldquo;borrowed&rdquo; car. <p>&nbsp;</p></span><span style="font-size: 8.5pt; font-family: Verdana">Dubbed simply &ldquo;The Battery Lock,&rdquo; this devise installs directly on the battery and renders it useless unless removed by a circular, seven-pin key. The company claims the lock can be installed and removed with one hand, even when reaching blindly into the most-difficult locations where the battery is installed. <p>&nbsp;</p></span><span style="font-size: 8.5pt; font-family: Verdana">Designed to work on all jets and helicopters using a battery with side-mounted contacts, the patented Battery Lock is easily installed. More information is available at <a title="blocked::http://www.dkgroup.com/" href="http://www.dkgroup.com/"><span style="color: #006633">www.dkgroup.com</span></a>. <p>&nbsp;</p></span><strong><strong><span style="font-size: 8.5pt; font-family: Verdana">Looking ahead </span></strong></strong><span style="font-size: 8.5pt; font-family: Verdana"><br />As stable as security conditions are now, it&rsquo;s unlikely things will continue unchanged indefinitely. At some point, the FAA and TSA will return their attention to making the Washington ADIZ a permanent fixture, for example. <p>&nbsp;</p></span><span style="font-size: 8.5pt; font-family: Verdana">According to FAA sources, the last thing we should expect is for the current boundaries to shrink. &ldquo;For that matter, it&rsquo;s not a given the ADIZ will change in shape at all, given the workload it imposes on ATC &ndash; particularly Potomac Approach,&rdquo; one source told World Aircraft Sales Magazine. &ldquo;But don&rsquo;t for a minute think they (TSA) have forgotten about the ADIZ&hellip; and whatever TSA remembers, FAA hears about.&rdquo; <p>&nbsp;</p></span><span style="font-size: 8.5pt; font-family: Verdana">NBAA and TSA may find a way to advance the Security Access Certificate program beyond it&rsquo;s pilot-project level. A little more experience might also convince TSA that access to DCA can stand to be relaxed &ndash; though most other corners of the capital city&rsquo;s security apparatus remain dismayed at the access already granted. <p>&nbsp;</p></span><span style="font-size: 8.5pt; font-family: Verdana">So much of what happens next hinges on TSA finally getting stable leadership. The fledgling agency struggled through four changes in leadership in less than four years &ndash; in some ways to the benefit of business aviation interests. In the end, though, business aviation is in the best position to provide for its own best security needs.<p>&nbsp;</p></span><span style="font-size: 8.5pt; font-family: Verdana">Providing for its own security stands to help continue the freedom, flexibility and efficiency that are the hallmarks of business aviation operations. And that&rsquo;s just the way the business aviation community would prefer it. <p>&nbsp;</p></span>]]></description>
         <link>http://bizjetsecurity.com/blog/2007/07/business_aviation_security.html</link>
         <guid>http://bizjetsecurity.com/blog/2007/07/business_aviation_security.html</guid>
         <category></category>
         <pubDate>Mon, 02 Jul 2007 15:06:07 +0000</pubDate>
      </item>
            <item>
         <title>The Art of Aviation Security</title>
         <description><![CDATA[<strong><p align="left">The Art of Aviation Security</p><p>by Robert P. Mark</p></strong><p align="left">&ldquo;We shouldn&rsquo;t define security risks by country,&rdquo; says Deborah Jacob,</p><p align="left">managing partner at San Mateo, Calif.-based BizJet Security. &ldquo;A broad</p><p align="left">brushstroke simply will not work. Every country has some safe areas, as</p><p align="left">well as places that are not.</p><p align="left">&ldquo;Before a trip begins, a company really needs to have its ear to the</p><p align="left">ground outside the U.S. We often gather our intelligence from public</p><p align="left">sources initially. But in the oil and gas industry, for example, we speak to</p><p align="left">project security people who are right there in the middle of things to learn</p><p align="left">about local politics, the regional direction of labor and religious organizations.</p><p align="left">But a good security company can only assess the risk. They can&rsquo;t tell</p><p align="left">you whether or not to make the trip.&rdquo;</p><p align="left">She reminds clients that when flying a U.S. aircraft into a foreign country,</p><p align="left">&ldquo;The bad guys already know who you are when you arrive. Even though most</p><p align="left">operators take the flags off the tail of the aircraft, they retain the N numbers.&rdquo;</p><p align="left">Jacob believes that while large companies often have vast intelligence</p><p align="left">networks, &ldquo;the answers [they get] are often 180 degrees out of sync with</p><p align="left">reality. Gathering good security information is not science; it&rsquo;s an art. Actually,</p><p align="left">sometimes, it&rsquo;s a best guess. We ask a lot of questions and also ask</p><p align="left">&lsquo;what if&rsquo; constantly. It&rsquo;s a healthy exercise. It&rsquo;s what pilots do all the time.</p><p align="left">You gather as much intelligence as possible and then sift through it all to</p><p align="left">look for the sources that have a vested interest in one perspective or another.</p><p align="left">You try to err on the side of caution.&rdquo;</p><p align="left">Jacob acknowledges that 9/11 changed attitudes toward security. However,</p><p align="left">she maintains that the reevaluation had begun much earlier. &ldquo;The real</p><p align="left">change began with the taking of hostages by the Iranians in 1979. Before</p><p align="left">that, U.S. citizens often thought they were wrapped in the American flag</p><p align="left">anywhere they went. [With the hostage crisis] it was clear that we couldn&rsquo;t</p><p align="left">simply call the State Department for help. When you feel overwhelmed by a</p><p align="left">situation, there&rsquo;s a message there. That&rsquo;s when you still have the power to</p><p>mitigate a significant portion of the risk.&rdquo; <em>&ndash;R.P.M.</em></p><em><strong><p>40aaAviation International News &bull; May 2007 &bull; www.ainonline.com</p></strong></em>]]></description>
         <link>http://bizjetsecurity.com/blog/2007/07/the_art_of_aviation_security.html</link>
         <guid>http://bizjetsecurity.com/blog/2007/07/the_art_of_aviation_security.html</guid>
         <category></category>
         <pubDate>Mon, 02 Jul 2007 14:56:25 +0000</pubDate>
      </item>
            <item>
         <title>Desperately Seeking Security</title>
         <description><![CDATA[<h3>Desperately Seeking Security</h3><br />Apr 27, 2007 <table bordercolor="#27527c" cellspacing="0" cellpadding="0" width="100%" border="0"><tbody><tr><td><!--startclickprintinclude--><table cellspacing="0" cellpadding="0" width="100%" border="0"><tbody><tr><td class="storyAuthor">By George C. Larson <p>&nbsp;</p></td></tr><tr><td class="storyBody"><img src="http://bizjetsecurity.com/media/images/news/bca_0407p3.jpg" align="left" border="0" /> <p>All schedulers and dispatchers build experience by encountering new situations and learning to deal with them; it's the daily bread of the flight-planner's profession. But learning by doing with a multi-million-dollar aircraft, its crew and your company's executives allows no leeway for making serious mistakes or errors in judgment. And securing all three assets during a trip into some parts of the world that are currently adjudged to be high-risk is not something that can be left to chance.</p><p>The perennial problem S&amp;D pros encounter the first time out on an international flight of this kind is that there's no Ghostbusters, Inc. out there to answer the question &quot;Who ya gonna call?&quot; Look up &quot;security&quot; in the yellow pages and you'll find a list of people selling burglar alarms. Search the Internet and you'll find pretty much the same thing with a leavening of software companies that will protect your computer. The NBAA lists more than 70 &quot;security&quot; firms in its products and services directory, which is available online; but the overwhelming majority of companies listed don't have security as their primary focus. The International Association of Professional Security Consultants will point you toward one of its members in the &quot;airports&quot; industry, but that's as close as it gets. </p><p>There is one professional association in Washington, D.C. -- the American Society for Industrial Security (ASIS) -- that acts as a central informational clearinghouse and certificating organization, with emphasis on facilities, security forces such as guards, and information (computer) security. ASIS claims 34,000 members, and its Buyer's Guide lists a handful of firms that specialize in aviation. But if you are a scheduler or dispatcher with a flight department of even modest size, chances are that security providers will, sooner or later, come to you. In fact, two leaders in the industry -- ASI Group and FAM International -- exhibited and co-presented at a break-out session on the subject of security at the recent NBAA Schedulers &amp; Dispatchers Conference in Phoenix. ASI Group is linked with Air Routing International, while FAM is closely tied to Universal Weather &amp; Aviation. But what if you can't wait around for one to turn up?</p><p>Security professionals who specialize in aviation say the flight department's first call should not be outside, but inside, with its own company's chief security officer and staff -- assuming you know who they are. &quot;One of the things we have been preaching for over 10 years,&quot; says Charlie LeBlanc, vice president of ASI Group, &quot;is to have a strong relationship between corporate security and the flight department.&quot; He says that post-9/11, most companies big enough to operate aircraft have their own security departments, and security staffs in general have become more involved in the aviation activity. &quot;If you don't have your own department or if security does not have a strong relationship with the flight department, then the next best thing is to have a reputable resource that offers information and services that can help support you.&quot;</p><p>When he first got into business aviation, he says he had no idea &quot;that corporate jets can do what they do.&quot; His first S&amp;D conference was more than 10 years ago. &quot;We had it in a ballroom with 20 exhibitors,&quot; he recalls. &quot;I'm sitting there talking with a few senior schedulers and dispatchers who'd been at it for years, and I quickly realized how much they have on their plates. Coordinate it . . . gotta get it done now . . . and 15,000 things are going on at the same time.&quot;</p><p>LeBlanc has a background in the commercial airlines and law enforcement along with 14 years under his belt with ASI and notes that the questions he hears from a new scheduler or dispatcher contacting his firm for the first time are almost always about intelligence.</p><p>&quot;'I'm taking the CEO to S&atilde;o Paulo,'&quot; LeBlanc says, emulating the callers. &quot;'What do we need to be worried about?' Well, that could mean a thousand things.&quot;</p><p>ASI started out in 1989 as Air Security International, providing intelligence focused on international destinations and threats: &quot;All the things you have to face when you're parking somewhere,&quot; he says. &quot;What's the reality on the ground?&quot; Soon ASI realized that it was doing a great job of pointing out problem areas, but offering no solutions. LeBlanc recalls one example: &quot;We'd tell you, 'Don't take the cabs.' So then what do I do?&quot; Today ASI offers a wide range of support services in close coordination with Air Routing International.</p><p>And in talking about the &quot;operational&quot; side -- the part that provides special cars, trained drivers, guards -- LeBlanc cautions flight department staffs: Intelligence gathering and dissemination in the form of risk assessments and trip briefings must be separated by a strict firewall from operations. &quot;Take the example where intelligence comes up with a threat -- don't use the taxis -- but operations can't counter that threat. If there's no separation between the two, the danger is that the intelligence could be degraded.&quot; He points out that there are airports where private aircraft security is not allowed yet the intelligence recommends it. &quot;The only way it can be done is to arrange it on the side,&quot; he says. &quot;Where the ability to service a threat or counter it is a problem, you have to inform the client.&quot; But a vendor should never water down the risk assessment.</p><p>Brian Leek is the CEO and a founder of FAM International and an 18-year security veteran who got his training in the military and his start in the business providing security for high-profile personalities in the music industry. Like many of his peers, he was basically a one-man show, with a list of international clients. FAM started out as a kind of loose federation of such individuals, but in 2001, Leek bought out the rest of the partners, and FAM today is the preferred vendor for Universal Weather &amp; Aviation and works closely with its trip coordination and tracking staff. &quot;We work hand in hand, and we're notified of schedules and any changes,&quot; Leek says.</p><p>FAM also serves charter operators and individual client firms, and executive protection is still the company's core service, Leek says; it was the focus when he joined the company in 1997. &quot;We had teams looking after the CEO. Going into some locations the aircraft was a very vulnerable part of the security plan, so part of the plan was to have the airplane guarded so we wouldn't need to go back and sweep it,&quot; he says. That led the company into the aviation business.</p><p>He seconds the advice that says start planning with your own security organization but notes: &quot;Some flight departments say [of security] 'It's not my job.' Some people push back against in-house security. But it is their job. Security is everyone's responsibility these days.&quot; It's a different era, Leek says. &quot;You've got to be more aware of your surroundings. If something doesn't look right, it probably isn't.&quot;</p><p>Leek says he's seen the full spectrum of links between the flight department and company security, from a CSO with total responsibility for aviation to others where there's no connection -- which mystifies him. &quot;To me it's a match made in heaven,&quot; he says. &quot;The jet itself is secure, and that security outweighs the time factor [in business travel].&quot; </p><p>Leek is one of many experts who cite the State Department's own traveler advisory sites as a first resource, especially the Overseas Security Advisory Council (OSAC), an organization founded in 1985 during the tenure of George Shultz as secretary of state. Unlike ASI, with roots in intelligence, FAM has no online intelligence service. &quot;I prefer to stay away from intelligence,&quot; Leek says. He'd rather provide specific assessments, for a given airport, for example. But FAM taps intelligence in the context of the trip it's assessing. And part of that process is knowing in detail the client's purpose for the trip. &quot;Are they downsizing, laying off 5,000 people? That would bring additional risks. And some companies are branded as American, so a destination in the Middle East may add risk.&quot; In addition to OSAC, FAM uses iJET, a private intelligence provider specializing in aviation.</p><p>David Solo is Universal Weather &amp; Aviation's security consultant. Don't let the word &quot;consultant&quot; fool you, though; he's a full-time employee with wide-ranging responsibilities, all anchored in security, and any Universal staffer can call him with a question. He's also used to dealing with S&amp;D personnel who are new to the challenges. &quot;Just about every day, I talk to people who are going [overseas to a high-risk destination] for the first time,&quot; he says. &quot;My advice is to use your resources. It's my responsibility to have that Rolodex, not yours. It's not a new dispatcher's responsibility to know the whole world. Network with your [S&amp;D] colleagues,&quot; he advises, &quot;and get your corporate security department involved.&quot;</p><p>Solo points to the patient process of vetting providers as the heartbeat of security. &quot;It means knowing you're getting good people,&quot; he says. &quot;We vet through FAM and also our own in-country rep. We might look at two companies and if they're using different people we'll want to know why. We look at their size and their reputation along with the resources to pull contacts together.&quot; Because the aviation segment is fairly small, word of mouth plays a big part in the vetting process.</p><p>Johan Selle is the director of operations for iJET Intelligent Risks Systems and a veteran military intelligence officer in South Africa who joined the Annapolis, Md., firm around the time it was formed in 2000. He says the client list today numbers around 400. When it opened its doors in April 2001, iJET's intent was to provide information to leisure travelers, but the company quickly shifted its sights to the corporate market, covering environmental, health and political factors and expanding its mission from travel risk management to asset risk management, including aircraft, crews and passengers. The firm linked with ARINC Direct in 2005 as a provider for flight support clients. iJET accesses open sources such as OSAC as well as embassies, both U.S. and others, to develop its intelligence assessments.</p><p>Selle's advice to S&amp;D staffers is to &quot;step back a bit and ask oneself and the company, 'Where does my role begin and end?' And 'Is this something we do in house or turn to professionals?'&quot; It pays, he says, to understand the client company, knowing who they are and their &quot;appetite for risk.&quot; He's seen all flavors, from zero-tolerance &quot;I wouldn't even think about it&quot; to more experienced adventurers like the oil exploration industry, which routinely travels to the narrow, tapered ends of civilization.</p><p>&quot;Intelligence does not begin and end with security,&quot; he reminds flight department staffers. &quot;A transportation strike can disrupt travel more than the risk of a kidnapping.&quot; He ticks off a list of nightmares: &quot;Major storm . . . environmental issues . . . entry/exit requirements.&quot; And he likes to establish good relations with the client CSO while he gets to know the company's insurance coverage, health concerns (&quot;Will the boss need medication?&quot;) and any medical evacuation services under contract.</p><p>While most security companies provide some form of intelligence, Selle cautions, &quot;They're selling a service, so they will sell you two armored vehicles and six guys with guns. So know who you're talking to and that they sell a service. It's something you learn over the years with experience,&quot; he says. The absence of a sanctioning body means S&amp;D professionals &quot;need to learn the value of networking,&quot; Selle says. &quot;Reach out to others and get help from those who've done it before. You need executive protection services in Hong Kong; you call five of the top firms and they're all using the same guy in Hong Kong. You've been operating into Milan, so you know the people there well, and now you're going to Istanbul. Call Milan and ask who they use in Istanbul.</p><p>&quot;You can point out that instead of going to downtown Bogot&aacute; for a meeting, they can have the meeting aboard the aircraft.&quot; By taking off and flying around for a couple of hours, the aircraft and the people at the meeting avoid the threats they would encounter on the ground. &quot;Walk in their shoes,&quot; Selle advises.</p><p>iJET provides either the dispatcher or crew with a trip brief, which can be just a security overview or cover perhaps 10 categories such as transport, health, communications, culture, entry/exit and financial/legal -- all in six to eight pages. A detailed country briefing of any of 184 nations may run to 20 or 30 pages and all are deliverable via a Web-based platform or e-mail. The company registers and tracks pilots in its system and knows where they all are. &quot;We don't need to know the passengers except in some cases,&quot; Selle says.</p><p>ASI's LeBlanc says security &quot;is not brain surgery. Get a list of the threats. Get another list of measures you can use to counter threats. It could be a procedure. It could be communication in a given region is weak, so the security counter is being able to equip the crew with satellite phones. Our job will always be to provide the resource to match the threats they face. We neutralize the threats to a point where it's as if the airplane never left its home hangar.&quot;</p><p>Countermeasures vary, he says. &quot;We wouldn't recommend an aircraft guard in London. It would be different if it were Lagos, Nigeria, where the recommendations start to sound like a high threat: aircraft guard, secure transport and an executive protection team for the principal. But that's still different from calling a provider of these services and asking 'What should I do?' because they'll sell you services even if you don't need them.&quot;</p><p>ASI Group issues a daily update -- &quot;Hotspots&quot; that anyone can subscribe to on its home page. Its snapshots of the day's events, broken down regionally, convey information unavailable through normal news channels: e.g., a dense fog in China shuts down Beijing's airport. A security breach on a Japan Air Lines flight leads to delays and cancellations. Strikes . . . protests . . . fires . . . you won't get any of it from a domestic news source. (Consider the difference between the U.S. version of CNN and the one you see overseas.)</p><p>Nations are rated for their level of risk of suffering physical harm on a scale of one to five, with five indicating threats up to full-scale military hostilities may be present. Embassy announcements and warnings are included after the regional round-up. And there's a concluding calendar of dates that might affect travelers. In mid-February, Lithuanian Independence Day closed all businesses and offices; but a detour to Mauritius on the same day would put crew and passengers in the midst of Maha Shivaratri, a public holiday when everything's closed.</p><p>LeBlanc says &quot;Hotspots&quot; has a following among flight department staffers who delight in surprising their colleagues with what's going on out there. &quot;Too many intelligence firms provide stuff that isn't specific to aviation,&quot; LeBlanc says. &quot;They can tell you about S&atilde;o Paulo, but not about the airport. Nothing should surprise the captain when he opens the door. Goats on the runway? He should know it. What he's gonna face?&quot;</p><p>Principals of the larger established companies in aviation security believe it's a growing field as fleets grow and companies expand markets, especially into the Third World. The time seemed right to launch a new company, say John Cosenza and Deborah Jacob, managing partners of BizJet Security, headquartered in San Mateo, Calif. Both the principals bring extensive backgrounds in aviation and corporate security to the table, Cosenza at Citigroup and Siebel Systems and Jacob at Bank of America and Bechtel. They opened the doors in April 2006.</p><p>As a two-person shop, they rely heavily on their network of vetted providers to serve clients and say that they take a more hands-on approach to servicing client companies. &quot;We think we're different from many security companies that don't have aviation security core competencies,&quot; Cosenza says. &quot;We want to be a boutique business,&quot; Jacob says. &quot;For the corporations and high net worth individuals we work with, we think we bring a unique perspective.&quot;</p><p>Cosenza emphasizes his own background running flight departments. &quot;You have to understand aviation management at the flight department level, and we've done it.&quot; Jacob adds, &quot;Our clients like that they're getting a corporate security director or corporate aviation management director [in us].&quot;</p><p>BizJet Security provides intelligence and information, from regular reports on major locations to trip sheets, analysis, and planning. &quot;It's easy to say 'Don't go,'&quot; Cosenza says, &quot;but we work for organizations that operate in these high-risk areas, so what we'd rather do is mitigate the risks and threats.&quot;</p><p>On the operations side, they support a trip in environments that demand a high level of security and get people out if things start to head south. It's a day-night, all-week job for both partners, who are always within reach of a phone. Says Jacob, &quot;I haven't had a good night's sleep in 25 years.&quot; Without trusted vendors, they couldn't make it. &quot;We have established resources around the world, and we have confidence in their decision-making,&quot; Cosenza says. BizJet Security prefers to work directly with the flight department scheduling and dispatching the trip. Tight monitoring via flight following and tracking is complemented by an e-mail link to the dispatch team or the captain. &quot;It's relationship building,&quot; Cosenza says.</p><p>The world has changed, but flight departments and executives traveling for leisure may not realize how much. &quot;Some places are no longer very safe,&quot; Jacob points out. &quot;Southern Thailand used to be a paradise where a lot of Americans went to scuba dive and sail.&quot; An Islamic fundamentalist movement active in the area has raised the threat level. Indonesia . . . Mexico . . . Venezuela . . . Bolivia -- Jacob ticks off the list of red-alert areas. &quot;The days of wrapping yourself in the [American] flag and feeling safe are over,&quot; she says. &quot;You can't look at a country in total; some areas are safe, some are not. Even here in this country, look at each airport, each city. There are places you wouldn't go.&quot; Cosenza also says locals can become inured to conditions and recalls the person who told him, of Bogot&aacute;, Colombia, &quot;If it weren't for the crime and the terrorism, this would be a great place to live.&quot;</p><p>Cosenza argues that the current global climate requires stepping things up a notch. &quot;I'm concerned that in many cases, people who plan a flight leave all security matters at the destination to a handler. A lot of handlers are good, but in a lot of cases you get untrained people who are guarding the aircraft because he's somebody's brother.&quot; He tells of the Citigroup captain who decided to go out to the aircraft an hour earlier than planned and found that the guard had built a fire next to the airplane to keep warm.</p><p>Brent Muldowan is representative of a user of security services. As an aircraft manager at TAG Aviation, he advises his company's aircraft owners on matters of security and knows the support vendors based on long experience. &quot;For us as managers, it's a bit different perspective. We make suggestions like, 'Mr. Owner, this is a scary place, are you aware of the risks?' and it turns out the corporation has requirements of its own. So we provide the best information we can and then collaborate with the client.&quot;</p><p>Muldowan says S&amp;D professionals can't afford to wait around for a trip to pop up and then find they're way behind the airplane. &quot;First examine the trip and go to an international trip planner. By and large corporate operators don't go to enough scary places to know what to do. Develop relationships proactively as a flight department. Really great schedulers don't wait for stuff to happen to them. They know people and they take action.&quot;</p><p>Rely on third party experts, he says. &quot;You want that third party involved because you need that kind of audit,&quot; Muldowan says. &quot;You hire these folks to act as devil's advocate, but you need them.&quot; He cites the case of an N-registered aircraft landing in the Congo and parking for five days. &quot;That's probably not a safe place to stay. There are security options but not trusted ones. The insurance rider would be $12,000 a night to cover just the airplane. Sometimes you have to drop somebody off and park somewhere else. Some places you don't even drop 'em off,&quot; he says. Others B&amp;CA spoke with preferred to avoid dropping off passengers because then they have no way to leave, but every situation is different.</p><p>&quot;Corporate aviation is an environment that's unique compared to any other field of security,&quot; says ASI Group's LeBlanc. &quot;I recall sitting down with chief pilots and learning that they carried $150,000 in cash -- wads of currency to buy fuel in these undeveloped areas. No credit facilities. Companies like Air Routing and Universal had [credit] cards but they were really for convenience. It's a security issue.&quot;</p><p>Both ASI Group and FAM International conduct informational sessions for schedulers, dispatchers and flight department staffs. FAM's security awareness program teaches S&amp;D professionals to identify global risks, understand how terrorists target and carry out attacks, how security providers mitigate threats, and the liability and accountability of providers. ASI's CAST (Corporate Aviation Security Training) teaches flight personnel to identify and act on threats as well as develop and maintain a current plan for contingencies while overseas.</p><p>What does all this cost? Expect to negotiate rates based upon your number of trips and passengers moved in a typical year, the size of the fleet, destinations and their nominal threat levels. Some agreements are modeled after software licenses where you pay so much per user seat. Few providers want to purvey one-time intelligence or assessments, so expect to be pitched on the basis of a long-term contract. You can insist on including an out clause so you can make a change if things don't work out.</p><p>Any scheduler or dispatcher who thinks the passengers and crew won't hold them to account for a trip that ends badly needs to view the 1982 film &quot;The Year of Living Dangerously&quot; based on a novel by Christopher Koch. In it, Mel Gibson plays an Australian journalist who, together with a small group of foreign nationals, becomes entangled in the events in Indonesia in 1965 when a violent political upheaval resulted in the death of thousands. The streets are lined with armed soldiers and tanks. The tension that builds as westerners try to flee the country will stand anyone's hair on end.</p><p>Now imagine that one of those fleeing westerners is your CEO, and he makes it home despite your inadequate preparation... </p></td></tr></tbody></table></td></tr></tbody></table>]]></description>
         <link>http://bizjetsecurity.com/blog/2007/07/desperately_seeking_security.html</link>
         <guid>http://bizjetsecurity.com/blog/2007/07/desperately_seeking_security.html</guid>
         <category></category>
         <pubDate>Mon, 02 Jul 2007 14:35:16 +0000</pubDate>
      </item>
      
   </channel>
</rss>

