A perfect storm for waste

CCTV Handbook 2015 Surveillance, Surveillance

Our anonymous client called us in a panic. A significant number of new laptop computers had vanished from a storeroom without trace. They did not want to suffer a reputational damage, as they took significant pride in their ability to investigate fraud and corruption. But this was a case of the baker being caught with no bread.

Alan Evan-Hanes, general manager for Corporate Business Security.
Alan Evan-Hanes, general manager for Corporate Business Security.

The storeroom where the laptops were taken from was in the parking basement and was one of the many areas not covered by their CCTV system. Cameras were placed wherever they might be needed, with no objective.

A quick review of the available CCTV footage showed that coverage was woefully inadequate for their needs, it used old technology and essentially blind at night.

These problems were aggravated by management only placing lip service to security. The role of security was almost an afterthought allocated by default to the facilities manager, who had no experience nor training for the undefined role. More importantly, no budget was allocated to him for security.

Being helpful

Obtaining copies of the existing CCTV footage was compromised as evidence and a substantial part of it was lost when the OHS officer tasked with the job failed to copy it successfully. He was found to perform this function purely because no one else had been allocated the task, and he had never received any training. He did so out of inquisitiveness and to help out.

The remaining footage had no offline reader, so the investigators were forced to download a viewer that turned out to be barely suitable. The footage also all had nearly the same filename, so it became near impossible to determine which day and time the investigators were viewing. The viewing software lacked zooming capability and did allow fast forwarding and still frame images. These problems were systematically resolved by the private forensic investigating team, but the solution was far from optimal.

Slowly the many files were identified and a coded naming convention was applied to allow viewing. The files did not allow coverage of the entire timespan needed as backups had not been taken when the OHS officer was on leave.

The existing useable footage was then reviewed in painstaking detail, as the investigators were not sure what to look for. Activity that could possibly be related to the missing goods was tracked, viewed through all possible cameras and noted. At night, lights to illuminate the building essentially blinded the cameras. Only one of the cameras was high definition and it was placed at the managing director’s office entrance.

Convenience beats security

The footage revealed what was already suspected, the existing security guards paid only lip service to access controls as well as company assets moved between buildings. Management were fully aware of this themselves, but were only too happy to bypass the existing controls as it hampered their movements.

Despite their best efforts, due to the lack of appropriate CCTV footage, the investigators were unable to conclusively prove beyond reasonable doubt exactly how the laptops went missing from the storeroom. The hundreds of hours of available CCTV footage failed to find the flames, but did show lots of smoke. Lots of inappropriate after-hours activity was evident. The investigators did however, establish sufficient evidence against the perpetrators and trace a substantial number of the goods on the black market.

Unfortunately, the issue was swept under the table as a major contributory fact to the theft was the extremely poor management controls and oversight of their assets.

Lessons learned

In retrospect, the following lessons seems so obvious, yet they were missed by a generally very capable management team:

1. The client paid only lip service to securing its assets (people, equipment and intellectual property).

2. The client had not performed a detailed security risk assessment to identify items of value and each item’s associated risks and controls.

3. The client failed to provide the security department with a formal dedicated budget.

4. The client failed to define and implement any security objectives, only implementing basic access controls.

5. The client failed to formally allocate distinct duties to the security staff.

6. The client made use of inadequate storage facilities due to operational demands.

7. The client did not install and operate the CCTV cameras adequately.

8. CCTV footage should be available for at least three months, backups tested for readability, and have trained persons performing the tasks.

9. The client failed to undertake regular scenario planning based on own vulnerability assessments, asset value and recent occurrences in the industry.

10. Persons undertaking security duties (especially external parties) should be adequately trained and rotated. Their daily functioning should not be bypassed by management for convenience as it sets the tone for all others to follow.

11. Any sub-contracting of the security functions must be formally managed on a regular basis with SLA breaches being followed up.

12. A regular operational capability assessment should be carried out.

Corporate Business Security specialises in the design, installation and maintenance of access control and surveillance systems.





Share this article:
Share via emailShare via LinkedInPrint this page



Further reading:

Vivotek partners to enhance retail management
Surveillance Retail (Industry) Products & Solutions AI & Data Analytics
Recognising the growing demand from retail enterprises to boost operational efficiency through cloud security solutions, Vivotek has announced a partnership between its AI-powered cloud surveillance platform, Vortex, and Kabob.

Read more...
Protect your assets with Visual Verifier
Secutel Technologies Surveillance Products & Solutions
To ensure your valuable assets and secured areas remain protected during this high-risk time, Secutel offers the Visual Verifier (VV) – a solution delivering comprehensive security and peace of mind.

Read more...
Smart surveillance and cyber resilience
Axis Communications SA Surveillance Information Security Government and Parastatal (Industry) Facilities & Building Management
South Africa’s critical infrastructure sector has to step up its game regarding cybersecurity and the evolving risk landscape. The sector has become a prime target for cybercriminals on top of physical threat actors, and the consequences of an incident can be far-reaching.

Read more...
Dallmeier launches new entry-level camera
Dallmeier Electronic Southern Africa Surveillance Products & Solutions
Dallmeier electronic is expanding its product portfolio with the Picoline, an entry-level camera that offers a compact and cost-effective solution for applications that require day and night recording with the highest resolution (IR mode).

Read more...
ONVIF launches new online learning initiative
Training & Education Surveillance News & Events
ONVIF has released the first course in a new online learning initiative designed to promote greater knowledge and understanding of ONVIF's workings. The first “Introduction to ONVIF” course is now available.

Read more...
Axis introduces ACS Edge and cloud storage
Axis Communications SA Surveillance Infrastructure Products & Solutions
Axis Communications has launched two new solutions within the AXIS Camera Station ecosystem, AXIS Camera Station Edge (ACS Edge) and AXIS Camera Station Cloud Storage (ACS Cloud Storage).

Read more...
Axis announces ARTPEC-9 SoC
Axis Communications SA Surveillance News & Events
Axis Communications has announced the 9th generation of its system-on-chip (SoC). ARTPEC-9 builds on and refines the capabilities and features of previous generations of the company’s in-house designed SoC, including exceptionally low bitrate, AI-powered analytics, quality imaging, and enhanced cybersecurity.

Read more...
Enhanced remote video management
Duxbury Networking Surveillance News & Events
Duxbury Networking has announced the release of Milestone Systems’ XProtect 2024 R2 advanced video management software (VMS), offering improved remote management, optimised video performance, and further enhancing the operational efficiency of businesses across various sectors.

Read more...
Elvey to distribute Tiandy
Elvey Security Technologies Editor's Choice Surveillance News & Events
Tiandy’s presence in South Africa was boosted in November with the announcement that Elvey Security Technologies will distribute a broad range of Tiandy equipment through its channel partners and provide project assistance.

Read more...
Transforming safety with smart cameras
Surveillance AI & Data Analytics
Most of us grew up thinking good security amounted to an alert man at a boom. Today, security is no longer just about being watchful. It is about understanding, anticipating, and acting, all in real time.

Read more...