June -July 2016 NZSM.Pdf

ISSN 1175/2149 nz June / July 2016 Security

Securing better qualifications for industry

Institute Takes A Stand against unlicensed investigators

Automotive cybersecurity: is car hacking really a thing?

www.DefsecMedia.co.nz SECURITY TECHNOLOGY RELIABILITY your electromagnetic

Underpinned by locking specialist! 25 year's experience and service with integrity.

Standard features include: • Field-selectable 12 & 24 VDC options • 300/550/750 kg holding force options • Slimline styling • Instant release • Stainless steel fitting hardware • Through hardened, polished stainless sex nut • Full protection against transients.

Options include: • Door Position Switch • End-to-end Magnetic Bond Sensor • Header extension angle bracket • Custom full width housings • Z/L brackets for inward opening doors • Frameless glass door brackets • Powder coated or anodised colours • Stainless indoor, outdoor and gate locks GUARANTEE

For expert advice and assistance with your security locking needs, trust in Loktronic, call us on 0800 367 565

Loktronic Limited Unit 7 19 Edwin Street Mt Eden Auckland Your guaranteed supplier of P O Box 8329 Symonds Street Auckland 1150 New Zealand Lockwood and Trimec products. Ph 64 9 623 3919 Fax 64 9 623 3881 0800 FOR LOK PLUS! Large stock and [email protected] www.loktronic.co.nz numerous models available. 2 nzSecurity June / July 2016 21066

14648 21066 Loktronic Your Electromagnetic Ad A4.indd 1 20/01/15 2:13 PM SECURITY TECHNOLOGY RELIABILITY your electromagnetic

Underpinned by locking specialist! 25 year's experience and service with integrity. IPS 10000 Standard features include: SMAVIA Appliance for up to 100 Channels and 36 TB of storage • Field-selectable 12 & 24 VDC options • 300/550/750 kg holding force options The appliance IPS 10000 combines the proven and extended VideoIP software SMAVIA Recording Server with a • Slimline styling reliable and high-performance server hardware. • Instant release Best matched components ensure high storage speed and thus allow the recording of up to 100 HD video chan- • Stainless steel fitting hardware nels in real-time. • Through hardened, polished stainless sex nut The integrated RAID 6 storage system already provides a high storage capacity and can be expanded by an • Full protection against transients. external RAID 6 and JBOD system. Thereby this appliance is the optimal recording system for large video installa- tions in Stadiums, Shopping malls, Casinos or Convention Centres.

Options include: Storage System • Door Position Switch Eight easily accessible HDD bays, RAID 6 storage capacity of 36 TB can be achieved and can be expanded by • End-to-end Magnetic Bond Sensor additional 60 TB. • Header extension angle bracket SeMSy® III Integration • Custom full width housings Optimised for SeMSy® III Video Management System. • Z/L brackets for inward opening doors • Frameless glass door brackets SMAVIA Viewing Client • Powder coated or anodised colours View footage over the network. It can be run on any workstation running Windows 7/8/10. • Stainless indoor, outdoor and gate locks GUARANTEE DMVC Server The integrated DMVC Server Software permits access with the mobile app Dallmeier Mobile Video Center, that is available for iOS or Android operating systems. For expert advice and assistance with your security Open Platform locking needs, trust in Loktronic, Together with the according licenses, third-party network cameras can be recorded with motion detection ONVIF protocol. call us on 0800 367 565

14648 21066 Loktronic Your Electromagnetic Ad A4.indd 1 20/01/15 2:13 PM nzSecurity CONTENTS

Contact Details: 6 Note from the Editor Craig Flint Telephone: +64 (07) 868 2703 8 Strategies For Success Mobile: +64 (0) 274 597 621 9 Security Industry Awards 2016 Postal and delivery address: 27 West Cresent 10 Things seem to be moving along apace at Loktronic Te Puru 3575 Thames RD5 12 Trust Mark to set standard for responsible use of biometrics New Zealand Email & Internet: 14 Driving Innovation Eyes on Dahua’s Complete Range of Solutions [email protected] www.defsecmedia.co.nz 18 NZ banknotes awarded for design and security

www.facebook.com/ 20 Synology Storage & Surveillance management software defsecmedia/ 22 Made in China security robot causes a stir www.twitter.com/DefsecNZ 24 NZSA training evaluation result raises questions www.linkedin.com/company/ defsec-media-limited 26 Institute Takes A Stand Against Unlicensed Investigators Upcoming Issues 27 Securing better qualifications for industry August / September 16 Banking, Insurance and Finance 28 Excellence in Physical Security: A Human Systems Approach Loss Prevention, Industry Training. 30 Security In The News October / November 16 Conference issue: 34 New Zealand to finally get a Computer Emergency Response Team Professional & Business. Accountants, lawyers, managers and consultants 35 Automotive cybersecurity: is car hacking really a thing? Disclaimer: The information contained in 36 Australia Round-up this publication is given in good faith and has been derived from sources believed to be reliable 38 Showcase and accurate. However, neither the publishers nor any person involved in the preparation of this publication accept any form of liability whatsoever for its contents including advertisements, editorials, opinions, advice or information or for any consequences from its use. Copyright: No article or part thereof may be reproduced without prior consent of the publisher. Industry Associations ENJOY a10 year guarantee* www.security.org.nz on Loktronic Indoor www.asis.org.nz Electromagnetic Locks! www.masterlocksmiths.com.au *Standard terms & conditions of sale apply.

0800 367 565 www.loktronic.co.nz 20851 www.biometricsinstitute.org www.nzipi.org.nz www.skills.co.nz www.defsecmedia.co.nz

4 nzSecurity June / July 2016 Innovating for a smarter, safer world. Axis offers a wide portfolio of intelligent security solutions:

Video encoders

Network cameras

Physical access Network video control recorders

Audio and accessories Video management software

Visit www.axis.com or send an email to [email protected] for more information.

Distributed by:

axis_ad_portfolio_man_nzsec_a4_en_1603.indd 1 2016-03-07 14:24:33 Note from the Editor

Welcome to the June issue of NZ Security. I’m just back from the annual Biometrics Institute’s Asia-Pacific Conference in Sydney, where the issue of privacy took centre stage. The ever-present yet evolving need to achieve an acceptable balance between security and privacy is a challenge across the industry, from biometrics to surveillance to cyber security. Whether or not there are the right legislative safeguards in place to manage this tug ‘o’ war, fundamental to maintaining public confidence is the idea of trust. Do people have trust in how government – or any organisation – will use their personal information and keep it safe? The Institute’s development of a ‘privacy trust mark’, which we cover in this issue, is a strong example of how industry is working to get on top of this. A story that will no doubt be read with interest by many within the industry is the piece on the NZSA training division’s NZQA External Evaluation and Review (EER) result. The training arm of the Association received a “not yet confident” rating in relation to educational performance, and this has understandably raised some question marks. To be sure, it’s a sub-standard result for an organisation that promotes itself as a standards setter in the industry, but the review took place back in 2014, and the key question now is what’s the current state of play. We pose this question – and more – to NZSA CEO Gary Morrison. Ultimately, there are much bigger questions facing the guarding sector Nick’s professional background is in government and the military. He was in relation to training. As the reports in our NZ and Australia news round- posted to Shanghai, Beijing and Suva as ups continue to indicate, guards are ill-equipped to manage situations a diplomat during a 14-year career with involving violence. Mandatory training does not provide adequate guidance Australia’s Department of Immigration and on what to do when a punch is thrown or when a guard is faced with the Border Protection, and has also served in real threat of unavoidable violence. It’s an industry Achilles heal that’s the Australian Army’s Signals (RASIGS) and begging for proper treatment. Transport (RACT) corps. He holds Masters Writing for us in this issue is Jas Qadir, a postgraduate engineering degrees in Asian Studies and International student at AUT. In a thought provoking article, he asks do the policies Relations from the Australian National and work culture of an organisation drive its physical and access University and the University of Sydney security needs? His research suggests an apparent over-emphasis within respectively, and he is a graduate of the Royal Military College of Australia. organisations on the technology of access control to the neglect of Nick’s research has been published in enforcing security-minded behavior among employees. several peer-reviewed journals and for the On the cyber security front, we take a look at the NZ Government’s Washington-based Jamestown Foundation announcement of $22 million for the establishment of a new national on international security, cyber conflict and Computer Emergency Response Team (CERT) to combat cyber-attacks and terrorism. His writing has also appeared in cybercrime. It’s welcome news, but New Zealand is a very late entrant to the international affairs publications including international ‘CERT club’, and there are plenty of voices claiming that it’s a The Diplomat, National Business Review, case of “too little too late”. Global Times and World Policy Institute As always, we are very keen to get your feedback. And if you have Blog. His insights are regularly sought something to say, we’d like to hear from you. via interview by outlets such as CNN and Agence France-Presse (AFP). www.defsecmedia.co.nz

6 nzSecurity June / July 2016 Address: W: www.nfs.co.nz 1/44 Greenpark Rd, P: 09 580 1576 Penrose, Auckland E: [email protected] STRATEGIES FOR SUCCESS 2016 EDUCATIONAL SEMINARS & AWARDS DINNER

1.45 to 2.00 Registration 2.00 to 2.45 Rebecca Cook – Strategic Solutions to Health and Safety Management

2.45 to 3.00 Break

3.00 to 3.45 James Yearsley – Succeeding in the Public Sector

3.45 to 4.00 Afternoon Tea

4.00 to 4.30 Steve Vermey - Strategies to create a winning tender

4.30 to 5.00 Networking 6.30 to 11.00 Awards Dinner – Recognising Excellence in the Security Industry

REBECCA COOK JAMES YEARLEY STEVEN VERMEY

Rebecca has over 15 years’ experience in James is a former officer in the British Army Steve is one of the founding Directors all areas of Human Resources and Health with over 20 years experience in security of BMV Solutions and has prepared and and Safety offering full HR and health around the world and has served in many reviewed thousands of tenders across and safety services to clients across a locations around the world including the world. Steve has led BMV Solutions range of industries, including operational tours in Afghanistan and to prepare over $16bn worth of tender telecommunications, retail, Northern Ireland. He has a wealth of submissions with its clients across manufacturing, banking, construction, IT, experience in security engineering and numerous industries. Steve has a unique seafood exporters and residential care consultancy including; the risk assessment ability to analyse requests for tender providers. My Health and Safety came and design of physical protection measures documentation, lead bid management about when company founder Rebecca for facilities and assets; research and teams, prepare tender documents and Cook, investigated the online Health & development into physical protection critique submissions for compliance and Safety solutions available for businesses measures against various threats; and the completeness. and organizations for whom the new Act instruction and training of risk assessment will have major impact. and security engineering. Both Private and Public purchasers have a vested interest in achieving value for Businesses are looking to partner with James presentation will focus on the PSR money for the goods or services they suppliers who do not present any and the trend towards a threat driven, risk are procuring. They will also have other additional Health and Safety risk. Clients based and holistic approach to security. In key drivers influencing their decision to are increasingly looking for evidence that 2012, the New Zealand Government had a award a contract. It is the supplier’s you have a Health and Safety system number of high profile security breaches. responsibility to know their potential that exists, is actively used by your The Information Privacy and Security client, understand how they think and to people, and is adequately managing the Programme was a response to these convince the evaluators of their value risks. Learn how your investment in breaches. The PSR sets minimum standards for money proposition – generally Health and Safety can actually help you which can be tailored and enhanced to speaking, this is not done well in win jobs, and can be a successful meet the agency risk environment and industry. The “Strategies to create a marketing strategy in its own right. agencies are able to implement it in a way winning tender” session will present five that is appropriate to their circumstances. It key strategies to create winning tenders. pushes the idea that there is not a ‘one size fits all’ solution to protective security; it must be designed around risk management principles.

8 nzSecurity June / July 2016 SECURITY INDUSTRY AWARDS 2016

PROUDLY SPONSORED BY THE SKILLS ORGANISATION

RECOGNISING AND CELEBRATING EXCELLENCE AND

OUTSTANDING SERVICE PERFORMANCE IN THE NEW ZEALAND SECURITY INDUSTRY.

FRIDAY 26 AUGUST 2016, ROTORUA

• 13 AWARDS CATEGORIES

• WORLD CLASS VENUE • FANTASTIC NETWORKING OPPORTUNITY

• EDUCATIONAL SEMINARS

(FRIDAY AFTERNOON) • ACCOMMODATION & ATTRACTION PACKAGES

For more information and to book your attendance:

Email: [email protected] Ph: +64 9 486 0441 Fax: + 64 9 486 0442 www.security.org.nz Things seem to be moving along apace at Loktronic

n the last issue we reported on of cables in the base unit of the standard an interview detailing a range of product. Installing technicians will quickly updates and improvements on their recognise what a real advantage this is. flagship range of New Zealand Imade Loktronic brand electromagnetic New Surface and Recess mounted locks. models When we spoke with Loktronic this Loktronic have designed a completely month we were updated on a significant new model from a clean sheet of paper, array of just-released improvements as it were! An unbreakable nylon base in their range of Fire Door Holding plate is made in one piece and is used as electromagnets (FDHs), also made here in supplied for the Surface Mounted option. New Zealand. Responding to demand for optional We learned that over the years colours and finishes, Loktronic now offer technicians have frequently asked for covering dress plates (escutcheons) in various models of the FDH but have not satin aluminium, gloss black or gloss white known whether the site was configured and these clip over the top of the nylon for either 12 VDC or 24 VDC, or base plate. As for the FDH40S model, as sometimes occurs, both. It is not the FDH40S/R incorporates the 12 or 24 uncommon for products to be ordered VDC selector option. without the technician having visited When Recessed Mounting is desired, the site, hence the dilemma of which the same components are used though with voltage to choose. Usually both voltages a small modification. The Mounting Plate would be purchased and the unused is separated into two parts by cutting the version returned at a later stage, involving four joining lugs. The Inner Mounting Plate unbudgeted time and cost. is used as a template to cut out a matching FDH40 S/R Surface Mounted in White That set the Loktronic techno-boffins sized hole in the wall board and is secured thinking and a new product range has to a stud or similar solid point. The Outer In line with other New Zealand made resulted. Mounting Plate is then positioned over the Loktronic brand products, all models are electromagnet and secured, leaving only guaranteed against breakage for 10 years. New voltage selector the chosen escutcheon to be clipped into When asked what other product upgrades Firstly, the standard FDH40S now place for an easy and attractive professional were in the pipeline we were met with a incorporates a nifty little PCB where the finish. Now that’s easy! smile and a wait and see! voltage can be easily selected between 12 or 24 VDC by the repositioning of two small jumpers. Although there are four power wires entering the PCB there are just two, non-polarity sensitive connectors so that wiring errors in the hook up procedure are eliminated. Secondly, the 12 VDC power consumption has been reduced to a low 110 mA with the 24 VDC remaining at a low 55 mA so that the continuous power draw is minimal. There is no great operating cost here! Thirdly, an extender PCB with colour- coded cables has been developed to enable the voltage selection option to be maintained when extension tube sets are used thereby avoiding the bunching up FDH40 S/R Inner & Outer Mounting Plates

10 nzSecurity June / July 2016 NZ made SECURITY TECHNOLOGY RELIABILITY fire door holding electromagnets 12 & 24 VDC selectable FDH40S unbreakable universal mounting unbreakable! • Low power consumption - low operating temperature • One product suits floor and wall mounting • Universal armature - offsets to 55º to suit doors opening past 90º • Wall mount extensions available • 12 & 24 VDC selectable • Push off button with no residual magnetism • Oversize armature for easy alignment • Emergency release button • Electroless nickel plated armature and electromagnet • Stainless fastenings • Full local support and back up

Standard, floor mounted, wall to door distance 114mm 10 YEAR GUARANTEE* Designed, tested and produced in New Zealand to AS4178

A) Wall mounted,126mm extn. tube (overall 202mm) B) Wall mounted, 156mm extn. tube (overall 232mm) C) Wall mounted, 355mm extn. tube (overall 431mm) A) B) C)

GUARANTEE Option A – Surface Mounted FDH40S/R Surface and Recess mounting

This device enhances an outstanding range of unbreakable products which conveniently hold open fire doors. When a smoke/fire alarm is activated the magnet instantly releases the door to the closed position to prevent the spread of smoke and fire. These units feature a choice of 3 covers for optimum aesthetic appeal and durability. The installer can utilise one device for surface mounting or for recess mounting.

Option B – Recess Mounted 10 YEAR GUARANTEE* For expert advice and assistance with your security locking needs, trust in Loktronic, call us on 0800 367 565 Satin Aluminium Gloss Black Gloss White

Loktronic Limited Unit 7 19 Edwin Street Mt Eden Auckland P O Box 8329 Symonds Street Auckland 1150 New Zealand Ph 64 9 623 3919 Fax 64 9 623 3881 0800 FOR LOK [email protected] www.loktronic.co.nz GUARANTEE 21556

*Standard terms & conditions of sale apply.

15496 21556 Loktronic Fire Door Holding Electromagnets Ad A4.indd 1 25/05/16 1:39 PM Trust Mark to set standard for responsible use of biometrics

To mark Privacy Week 2016 in May, the Biometrics Institute released a Privacy Trust Mark Summary Paper, which provides an update on and next steps for its proposed Privacy Trust Mark. To be issued for a biometric product or service, the proposed trust mark is envisaged as a way to reassure consumers of the responsible use of biometrics and to make privacy compliance easier to understand. According to a 13 April Biometrics Institute media release, the trust mark project aims to deliver “a mechanism by which businesses can provide assurance to consumers that they meet an accepted standard of good privacy practice and therefore can reasonably protect biometric information collected and/or used.” It is intended to be applicable internationally and be broadly compatible across jurisdictions. The need for a trust mark appears driven by the rapidly increasing use of biometric systems in sectors beyond government and security, including banking and finance, communications, social media, general business and retail. Biometric Iris scanning equipment used by the US Marine Corps in Iraq According to the Institute, there is an increasing call “within trust mark and that it must be prepared to police it, address the industry as well as by privacy and consumer advocates, for unauthorised use of it, and actively revoke a mark where required. mechanisms to ensure current and future use on biometrics is In the longer term, the most respected form of trust mark should appropriately and proactively governed.” be externally audited. In the short term, a self-assessed mark is “As a peak industry association, we have a key responsibility in feasible (if the criteria and substantiating documentation are all educating people about the convenience and security biometrics public) and it should be piloted. can offer and in raising awareness of best-practice around the In August 2015 the Institute received funding from the responsible use of biometrics,” stated the Hon Terry Aulich, Australian government to progress the trust mark’s development. Head of the Biometrics Institute Privacy Expert Group, in the 13 The second stage of the project continued with the development April media release. of the proposal for an initial self-assessed trust mark that would The Privacy Week summary paper gives an overview of the be augmented by an independent Privacy Impact Assessment, and two stages of the project completed to date: stage one, which this was completed in March 2016. delivered a feasibility study and roadmap; and stage two, which This second stage recommended that self-assessment should delivered a self-assessment questionnaire and Privacy Impact be via a questionnaire, with responses required to be substantiated Assessment template to be trialed as part of stage three of the with publically available documentation, and that National project. Strategy for Trusted Identities in Cyberspace (NSTIC) Fair Information Practice Principles (FIPPs) should form the basis of The trust mark by stages the trust mark criteria, as they are aligned to most international It was in October 2014 at its annual show in London that the data protection regulations. Institute first announced its intention to develop a Biometrics Stage three of the project will involve a small set of trials Institute Trust Mark. In February 2015 it announced that it had using the proposed self-assessment criteria to test the viability of awarded a contract to Lockstep Consulting to write a landscape the draft questionnaire and evaluation process. report about the feasibility of a trust mark. The proposed initial model provides a future pathway to Constituting ‘stage one’ of the project, the landscape an externally assessed and open standards-based accreditation report included interviews of more than 20 user and vendor scheme. representatives, and concluded that there was strong overall “This project is very exciting as it will help us work out how support and appetite for a trust mark, with most stakeholders the process could work later and importantly, what needs to be seeing it as an important way to provide consumers with in place in order to effectively manage and govern such a trust increased confidence and comfort in the responsible use of mark” said Isabelle Moeller, the Institute’s Chief Executive. biometrics. “Several of our members have already expressed an interest in The report recommended that a wholly owned subsidiary participating in a trial which could potentially lead to the issuance of the Institute should eventually be established to issue the of a pending Trust Mark.”

12 nzSecurity June / July 2016 The new Panasonic WV-SFV781L Camera embodies Panasonic’s Security DNA philosophy. We provide True 4K from the Panasonic made optics to the chipset and black box technologies, such as the rain wash coating. The WV-SFV781L is designed from the ground up to provide the IT’S IN OUR DNA best 4K experience.

WV-SFV781L VARI-FOCAL CAMERA

- 4k images up to 30fps - Ultra wide 6x motorised optical zoom - 12.4 Mega pixel sensor - Rain wash coating - Fog compensation

OUTSTANDING CLARITY THE PANASONIC VARI-FOCAL OPTICS AND 12MP SENSOR

OFFERS IMPROVED CLARITY FALL OFF REDUCED 12M PIXEL MODE

With 4x the resolution of FHD more The Panasonic 4-25mm optics insure the The WV-SFV781L Can provide a details can be seen. image stays sharp right to the edges. 12M Pixel output at 15Ffps.

WWW.PANASONIC.NET/SECURITY

J0004568 Vari-Focal Advert ƒ.indd 1 27/07/15 11:18 am Driving Innovation Eyes on Dahua’s Complete Range of Solutions

2015 was a year of success for Dahua A Pioneer in Technology Technology, which streamlined its At the end of the day, Dahua is still a operations, pushed its global branding technology-driven company that leads strategy, expanded research on innovative the market and appeals to users with its products and solutions, and explored new cutting-edge innovations. The company areas of business. Due to these efforts, has over 3,000 R&D professionals and Dahua was able to survive its most devotes 10 percent of its annual sales to difficult period since founding and make research and development, with the goal a turnaround: last year its total sales were of developing advanced, high-quality, and US$1.6 billion, a growth of 37.45 percent reliable solutions for users. In fact, Dahua’s from 2014. Net profit was $0.22 billion, a commitment to growth and innovation growth of 20.1 percent. On a&s’s Security has won the trust of China Development 50 list, Dahua’s ranking jumped from No. Bank (CDB). On February 17, Dahua 6 in 2014 to No. 5 last year. Meanwhile, and the Zhejiang branch of CDB signed Dahua is continuing its globalization a financial cooperation agreement, with campaign as the company builds more the amount of financing totaling 10 presence in the world. Besides North billion RMB (approximately $1.6 billion) Fu Liquan, President of Dahua Technology America, Europe, Dubai and LATAM between 2016 and 2021. “We thank CDB’s further collaboration, which is sure to where Dahua already has subsidiaries, support and approval of Dahua,” said Fu help Dahua make a giant leap forward.” more established subsidiaries and offices Liquan, President of Dahua Technology. As for its technology development this in APAC and other regions of the world “Our signing of the agreement with CDB year, Dahua will focus on two aspects: HD will begin operation this year. represents both sides’ commitment to analog and “true” 4K.

14 nzSecurity June / July 2016

A Complete Range of Solutions Over the years, Dahua technology has not only established itself as a leading video surveillance solutions provider with presence in various parts of the world but also expanded its portfolio. As part of its technology development this year, Dahua will focus on two aspects: HDCVI 3.0 and ‘true’ 4K.

HDCVI 3.0 As a pioneer in the HD-over-coaxial technology, Dahua rolled out HDCVI back in 2012, a breakthrough technology that delivers HD video — long associated with IP — over the user’s existing coaxial cable. After HDCVI 1.0 and 2.0, this year Dahua launched the new generation of HDCVI — HDCVI 3.0 — at ISC West in April. According to Fu, a defining feature of HDCVI 3.0 is the HDCVI 3.0 DVR supports not only HDCVI but also HDTVI and AHD edge devices, a major innovation for users who are no longer limited by the type of camera they can choose. “For a long time, for the end user means the HDCVI 3.0 DVR supports not But what truly sets HDCVI 3.0 apart choosing a particular HD analog only our HDCVI but also other signals, from its predecessors is its high-definition technology, they have to side with a including AHD, TVI, and IPC. For users, and intelligent features. In terms of particular alliance. That’s no longer the it protects their investment, as with our high definition, the maximum resolution case with HDCVI 3.0,” Fu said. “For DVR you can choose whatever type of currently supported by analog is 1080p, HDCVI 3.0, we’ll add interoperability or camera based on your own preference or and HDCVI 3.0 seeks to change that. “For multi-mode features into storage. That your own use scenario.” HDCVI 3.0, we’ll introduce 4-megapixel

Dahua Building Binjiang District, Hangzhou

16 nzSecurity June / July 2016 cameras, and research and development intelligence, and we agreed that these were example being motion-still extraction that work is currently being done on 4K the defining features of IP,” Fu said. “But extracts the still portion of the image cameras, which we plan to announce with HDCVI 3.0, analog and IP are now and does more compression to it. “The in the second half,” Fu said. Further, on the same footing, and HD analog’s end result is compression by as much Dahua will incorporate more intelligent competitiveness will increase. This, plus as 70% for still images, as well as 40 to features into HDCVI 3.0. These include analog’s usability and simplicity, will make 50% for daylight images with moving facial recognition, people counting, heat it stay longer.” objects,” Fu said. Aside from these, mapping, and fisheye-dome smart tracking Dahua also has 4K display solutions that whereby the user can zoom in and out ”True“ 4K are especially helpful in city surveillance on an area of interest on a panoramic As for Dahua’s IP offerings, it will projects. One example of how this has view. These are features that are otherwise offer what it calls “true” 4K, rolling helped end users is a solution for police in found in IP solutions. out solutions for each part of the video China’s Jiangxi Province, where the police “Dahua believes that high-definition surveillance process, namely image monitoring station comes equipped with and intelligence should not be reserved for capturing, transmission, storage, and a giant TV wall made up of 500 60-inch IP only. They should be applied to analog display. At the end of last year, the panels, allowing operators to pinpoint as well,” Fu said. “For the overwhelming company already launched a series of 4K every minute detail shown on the screen. existing analog install base, they want cameras including 12-megapixel bullet “What we offer is not only the front-end extendibility and continuity of their and IR dome cameras. But a challenge capturing of image, but also everything infrastructure. Technology can evolve, but facing customers these days is bandwidth from transmission to storage to display. infrastructure can’t be replaced overnight. and storage management, amid This capability to offer true end-to-end 4K And for these users, we believe they ultrahigh-resolution images captured by solutions is what sets us apart from others,” also have the need for higher resolution 4K cameras. Compression, therefore, Fu said. “For our competitors, their end- and intelligence. That’s what motivated becomes critical. to-end 4K may cover the frontend and the to roll out HDCVI 3.0 and push the Dahua uses two approaches to backend, but to add display … not a lot of HD analog technology forward.” And compression: either the equipment is players can do that,” Fu said. according to Fu, HD analog is here to stay, H.265-ready, or it supports Dahua’s and HDCVI 3.0 will even prolong HD own Smart H.264+ technology, which Future Growth analog’s lifecycle. “For the longest time, builds upon and optimizes the existing Already with operations in different IP claims to be a superior technology H.264 architecture. The technology uses parts of the world, Dahua also set up over analog due to its high-definition and various algorithms to lower bitrates, one professional local teams staffed with local experts who will not only sell our products but also provide further support and service to customers as well as partners. Technology-wise, Dahua will boost its HDCVI offerings, at the same time positioning itself as a true end-to-end 4K solutions provider. Already ranking the world’s second largest market share according to the IHS 2015 report and 5th on a&s’s Security 50, Dahua is set to see continued growth in the years to come.

June / July 2016 nzSecurity 17 NZ banknotes awarded for design and security

New Zealand’s new five-dollar note - featuring a range of new and enhanced security features – has won the International Bank Note Society’s prestigious banknote of the year award. The award recognises outstanding achievement in the design, technical sophistication and security of a banknote or banknote series. New Zealand’s new - and award-winning - $5 note Twenty banknotes from around the countries. The CARICOM common The Bank says it’s important to avoid world were nominated for the award, and passport regime has been lauded as handling it (so the police can trace the the winner was voted by IBNS members. promoting easy travel within the Caribbean counterfeiter). “Either refuse to accept the The IBNS says New Zealand’s $5 note Single Market and Economy (CSME). note or store it in a bag or envelope, then was the competition’s “clear winner”, Since New Zealand’s current inform the police immediately.” with Sweden’s 20 Kronor note, Russia’s banknotes were first issued in 1999, The RBNZ suggests the following steps 100 Ruble note, Kazakhstan’s 20,000 security features and the technology for when dealing with a suspicious note: Tenge note and Scotland’s (Clydesdale designing and printing banknotes have • Make sure you are familiar with the Bank) 5 Pound polymer note voted the all advanced considerably. And while security features. It’s easy to quickly runners-up. counterfeiting rates here in New Zealand check the colour changing features Reserve Bank of New Zealand are low compared to the rest of the world, in the windows when accepting a Deputy Governor Geoff Bascand says the Reserve Banks stresses the need to banknote. the award is testament to the hard stay one step ahead of the game. • If you are a cash handler, make sure work and innovation by RBNZ and To give industry time to prepare for you are familiar with your company’s its partners that went into developing the new banknotes, they have been rolled procedures for handling suspect and the note. The upgraded $5 and $10 out in two phases: (i) $5 and $10 notes counterfeit banknotes. bills went into circulation in October were released from October 2015; and • Please check all notes that you receive. last year, packed with security features (ii) $20, $50 and $100 notes were released • If you suspect a note may be designed to make spotting fraudulent from April. As the existing notes pass counterfeit, compare it with a genuine banknotes easier than before and to through the cash handling process, they one. Use the RBNZ’s guide for maintain NZ’s strong track record will be replaced with the new series. checking your banknotes if you need against counterfeiting. RBNZ anticipates it will take up to 18 help. Make sure you are familiar with “We are proud of all of New Zealand’s months for all of the existing series to be the security features of the previous new banknotes, but to have our $5 note rotated out of circulation. polymer banknotes. recognised internationally is very special,” The new notes bring with them a • If you haven’t accepted the banknote said Mr Bascand. “The note incorporates number of new and updated features that yet, politely refuse to accept it. some of the world’s most advanced will help people identify legitimate notes, • Under no circumstances should you security features, yet still beautifully including: take actions that may jeopardise your showcases New Zealand’s history, culture • A larger clear window features a safety or that of others. and heritage.” more detailed holographic metallic • Report to the Police that someone Although it is a New Zealand note, element potentially attempted to pass a it was actually designed and printed • The native bird icon changes colour counterfeit note. by the Canadian Banknote Company as the note is tilted, and a ‘rolling • If you are in possession of a suspect (CBN). Established in 1897 to supply bar’ can be seen moving through the note, store the note safely and handle security-printed products to the Canadian space it as little as possible. Note all relevant government, CBN manufactures a range of • A small ‘puzzle number’ lines up to details such as date, time and place of documents and systems that are common form a numeral when the note is held receipt, car registration number and targets of counterfeiters and fraudsters, up to the light whether you have CCTV. including currency, birth certificates, driver’s • Raised ink is still used on the large • Please hand suspect notes to the Police licenses, Id cards, passports, postage stamps denomination number. as soon as possible. and lottery systems. On its ‘Brighter Money’ website, the For further information, contact: In recent years, CBN has also supplied RBNZ provides guidance on what to do if The RBNZ at [email protected] machine readable passports used within you’ve been handed a note you think does or visit their website: Caribbean Community (CARICOM) not have all the security features. http://rbnz.govt.nz/

18 nzSecurity June / July 2016 fired up protection LOKTRONIC’s expansive product range has just become even wider with these first class EGRESS and FIRE PROTECTION DEVICES and PROTECTIVE COVERS.

NEW STI-WRP2-RED-11 IP67 STI-1130 Ref. 720-102 Ref. 720-062R Surface mount with horn and spacer Also available in White. 255mm H x 179mm W x 135mm D STI-RP-WS-11/CN Ref. 720-052W Available in White, Green, Blue & Yellow. STI-13000-NC Ref. 720-090 Flush mount, no horn STI-RP-GF-11/CN 206mm H x 137mm W x 69mm D Ref. 720-051G Available in White, Green, Blue & Yellow. NEW STI-13B10-NW Ref. 720-092 STI-RP-RS-02/CI Surface mount, horn and label optional Ref. 720-058 Cover included. 206mm H x 137mm W x 103mm D Flush Mount Available.

• Approved to EN54-11 • Current Rating: 3 Amps @ 12-24V DC, 3 Amps @ 125-250V AC • Material: Polycarbonate STI-1100 Ref. 720-054 • Comes with Clear Cover Flush mount with horn • 2 x SPDT switches 255mm H x 179mm W x 86mm D • Positive activation that mimics the feel of breaking glass. • Visible warning flag confirms activation. • Simple polycarbonate key to reset operating element - no broken glass. • Dimensions: 87mm Length x 87mm Width x 23mm Depth (Flush Mount) & 58mm Depth (Surface Mount) STI-6518 Ref. 720-060 Flush mount, no horn STI-6255 Ref. 720-042 165mm H x 105mm W x 49mm D Mini Theft Stopper discourages inappropriate use of equipment. Sounds a powerful 105 dB warning horn when activated. Tough, ABS construction. Reed switch activation for cabinets and display cases or unique clip activation for freestanding equipment. Does not interfere Ref. 720-094 STI-13210-NG with use of protected fire fighting equipment. Surface mount, horn and label optional Compact design 85mm H x 85mm W x 25mm D. 206mm H x 137mm W x 103mm D

STI-6720 Ref. 720-047 All STI ‘Stoppers’ are made of tough, UV stabilised Break Glass Stopper. Keys under plexiglas. polycarbonate. Many can be supplied with or without Protects emergency keys from inappropriate use. Keys remain visible. Fast, easy installation. Simple, a 105 dB horn. Other models and sizes available inexpensive plexiglas. 3 year guarantee against including weather resistant options. breakage of the ABS housing within normal use.

NEW

Battery Tester Ref. 730-101 Fire Brigade Alarm: (Closed/Open) Ref. 730-202 Anti-Interference Device ViTECH, strong, lightweight aluminum case, 5, 15 ViTECH branded Type X and Type Y (illustrated) models with Ref. 730-400 series and 30 amp battery tester for fire and alarm use. temperature compensated pressure transducers with digital display ViTECH AID for sprinkler valve Weight: 500gms, Size: 165mm x 90 x 70mm. showing pressures for defect, fire and pump start. monitoring; fits all ball valve sizes.

ViTECH products are designed and produced in New Zealand.

15254 21451 Loktronic NZS Fired Up Protection Ad Jan16 A4.indd 1 21/01/16 11:14 AM Synology talks storage and surveillance

Synology, along with authorised From small retail to big corporate distributor VST NZ Ltd, recently hosted DSM’s Surveillance Station provides their 2016 Auckland storage workshop. a simple plug and play solution, which The Sky City Conference Centre event supports over 4300 models of IP cameras was the latest in a series of workshops, from 90 brands, giving the user the ability following hot on the heels of similar to integrate with their existing solution events in Sydney, Melbourne and or to choose the camera they desire. Brisbane. With easy to use cross-platform software Synology has long been a well support, recorded and live footage can be known name in the IT and surveillance managed and played back via a browser- industry, boasting the number one based interface. NAS box in the industry and the award The DS Cam smart phone application winning DiskStation Manager (DSM) allows for footage to be viewed from data storage platform. Found on every anywhere for easy remote access. NAS, this powerful intuitive web-based DSM’s live view feature supports a system also comes with free surveillance 64 channel live view feed at 720p and a management software that allows the wide range of intelligent video analytical user to manage the IP cameras in their features that can send the exact kind of network. alerts or locate the exact footage needed Synology storage workshop recently held in Auckland’s Sky City It’s a well-established trend: IP camera in a flash. It also has ‘action rules’ and solutions are becoming more popular and I/O module integration that effectively NAS to their deployment as the need more affordable. With the switch to IP provides an automated surveillance system. arises. This allows the user to pay as solutions and higher resolution cameras Tasks can be automated to be carried out they grow and split resources and data there are ever increasing demands when a predefined event occurs, reducing to different units, but still monitor and on storage. To add to this, we’re also the need for human intervention. manage video feeds and cameras as well witnessing unprecedented demand for as receiving notifications on a single management software with intelligent Pay as you grow solution screen. Even for massive architecture video analysis. The Central Management system with hundreds of cameras, everything is With big storage and software being (CMS) capability provides an easy to scale unified and readily available. what it does best, Synology appears to up solution, allowing users to expand Finding and playing back footage have the Surveillance side well and truly their surveillance capabilities. Starting on a large deployment can be painful covered – for projects big and small. small, the user can add more Synology and time consuming, and this is when DSM’s Smart Search features really come in handy. With Smart Search, the user is able to track any change during their IP camera’s watch time, and customize search parameters to narrow down a search to avoid false alarms. Alerts can be set for motion detection, camera occlusion, missing objects, lost objects, foreign objects, and for objects that stay in the camera’s no-idle zone for over a set period of time. Utilising the Timeline panel, a user can select a date and time and then play back recordings and from up to 64 channels concurrently or non-concurrently. With on-screen tools, customizable layouts, and many other features, events can be pinpointed The Central Management system enables you to “Pay as you grow “ with relative ease.

20 nzSecurity June / July 2016 As one accumulates an enormous amount of recordings from multiple cameras over time, Surveillance Station provides tools that allow the user to manage their recordings and to choose what can be deleted or archived.

Simple to use, cutting edge technology Solutions with all the bells and whistles are sometimes either too good to be true or require a PhD degree to operate, but the Synology Surveillance Station 7.2 comes with a GUI befitting even the most technologically challenged user. Easy to setup and not demanding in-depth product knowledge, it minimises the learning curve by providing well defined functions. On the administration side, remote setup can be established allowing the user The award winning data storage platform DiskStation Manager (DSM) to interface via web browser. ease. Synology NAS systems support the features, which provide the capability to All Synology units come with free automated RAID management system, back up data to another Synology unit periodic updates that you can download Synology Hybrid RAID (SHR), giving you either on or off site. manually or automatically, so staying up the benefit of easily upgrading your hard Hyper backup is an advanced feature to date with the latest Synology software drives when more disk space is required. that supports the ability to back up the features is hassle free and has no price tag. With the ability to scale up by Synology NAS to different types of equipping expansion chassis on some destinations such as other Rsync servers I already have my own VMS or models, running out of storage space is or public clouds, so that the user can surveillance software a worry of the past. The folk at Synology choose a strategy best suited to their Adopting a Synology doesn’t mean recommend running at maximum needs. This feature also has a cross- that you have to discard your current capacity and maximum bandwidth using version de-duplication capability to surveillance system. With the coming Link Aggregation, which is supported by minimise storage usage. of age of HD recording, the demand on most Synology units. Snapshot replication is another storage has increased dramatically, and beneficial feature that is designed to help one has to consider a range of potential Protect your surveillance footage with replicate data to another Synology unit issues, including stress on hard disks due Synology every five minutes. This feature provides a to excessive heat and vibration. Rather than focusing on surveillance super efficient way to back up data offsite, Synology has that all covered. Ranging applications, the Sky City workshop so that when disaster strikes you can regain from a 1 to 180 bay solution, they have was more squarely focused on storage, access to the data within minutes. overcome some of the most demanding providing insight to new innovations that The specs are impressive, and one storage challenges of data protection and provide market leading data replication, can visit www.synology.com to check overheating. With a NAS unit as core, the disaster recovery and business continuity them out. What they amount to is a system supports SMB/CIFS, AFP and solutions. system that allows businesses to start NFS protocols, allowing the system to be Synology has a comprehensive backup with a lower upfront cost and to scale up mounted easily to a surveillance server. solution to ensure data safety. With the storage capacity as requirements grow, all Synology also supports iSCSI protocol, new DiskStation Manager 6.0, released the while investing less time on storage affording the ability to setup an iSCSI in March, users can benefit from the new management. As such, it’s a compelling target and mount it on a server with Hyper Backup and Snapshot Replication package.

Synology boasts the number one “Network-attached storage” in the industry

June / July 2016 nzSecurity 21 Made in China security robot causes a stir

Built by the National Defence University between charges, and is equipped with a According to the People’s Daily in China and promoted on social media by remotely operated “electrically charged Online, “AnBot represents a series the Chinese Communist Party mouth piece riot control tool” and an SOS button for of breakthroughs in key technologies People’s Daily Online, news of China’s people to notify police. including low-cost autonomous navigation new “intelligent security robot” has It has been dubbed ‘AnBot’, a and intelligent video analysis, which will been received with widespread concern transliteration of the Chinese ‘an’ play an important role in enhancing the by netizens in the West. Considering (security) and ‘bao’ (to protect). The country’s anti-terrorism and anti-riot international trends in the robotisation of researchers say that the robot is designed measures.” security, is such roundly negative reaction to be used to patrol airports, train The report states that AnBot is able to actually justified or is it just a case of stations, shopping malls, hotels, banks, patrol autonomously and “protect against pananoid China bashing? government buildings, warehouses and violence or unrest.” Unveiled at the 12th Chongqing Hi- port facilities. It has already undergone According to a report by Xinhua, Tech Fair in April, the robot is 1.49 metres test runs at a military camp, airport China’s state newsagency, “Wei tall and weighs 78 kilograms. It claims and museum in the inland Chinese city Quansheng, an officer from Beijing a top speed of 18 kilometres per hour of Changsha with “very positive” user Municipal Public Security Bureau, said and an operating duration of eight hours feedback. the robot guard can be used in many

22 nzSecurity June / July 2016 Is the criticism fair? The release of security robots over the years has kept us both entertained and enthralled. It’s now been a decade since Secom developed the Robot X, a six-wheeled outdoor surveillance robot designed to be either remotely controlled or pre-programmed to chase intruders, take high definition video pictures, issue loud warnings and release a dense, billowing cloud of smoke to frighten off the bad guys. 2012 saw the release of South Korea’s Robo-Guard, a five-foot tall robot designed to patrol prisons on thick rubber wheels and equipped with cameras, including 3D, a microphone and speaker, and software designed to evaluate and report on out-of-the-ordinary inmate behaviour. In comparisons of AnBot to actual existing security robots, it is public places such as airports, stations and enforcement bodies leads to the real worry the Knightscope K5 that it is said to subways to help with police officers’ anti- that these robots could quickly become most closely resemble. As reported in riot missions.” an Orwellian surveillance tool deployed February’s NZ Security Magazine, the Despite its immense size, Communist against the population.” five-foot tall, 300-pound security robot Party-ruled China is one of the most But there is also concern that such has been turning heads on the streets internally surveilled countries on earth. robots could be used by an authoritarian of Silicon Valley since 2014, and was Party organs operate from the national state for the carrying out of violence that received in the media with largely positive level all the way down to individual would otherwise be beyond the pale for curiosity. neighbourhoods, streets and workplaces, flesh and blood security officers. And such The aesthetic similarities of the two and a collection of security services that concerns are not altogether misplaced. robots are clear, but it’s what’s under are either government run or controlled In its infamously bloody suppression their respective hoods that makes them combine to make China an unrivalled of Tiananmen Square activists in markedly different. According to Popular police state. In cyberspace, the infamous June 1989, the central government in Science, “K-5 is a mobile sensor platform ‘Great firewall’ epitomizes the extent of Beijing resorted to trucking in military that actually shares its data with the surveillance and censorship in the People’s personnel from distant provinces to general public during emergencies. Anbot, Republic. mow down unarmed members of the on the other hand, can interact with It is, however, a police state that has public. The deployment of mechanised the public, respond on scene to crimes, faced tough security challenges in recent security officers would take this one and has weapons to knock out human years, with increasing worker and social step further by removing the humanity troublemakers.” unrest and frequent mass demonstrations element altogether and ensuring officer Previous security robots have arising from a range of collective compliance. offered little more than a deterrent frustrations. Resentment over growing The People’s Daily Online news site effect to would-be perpetrators of inequalities in wealth and opportunity, tweeted a photo of the robot, which was crime. The AnBot takes things to an environmental problems, government then shared by American intelligence altogether new level due to two of its corruption, forced evictions and failed whistleblower Edward Snowden with the characteristics – the first one technical, petitions, gangster activity and personal caption: “Surely this will end well”. the other policy. Firstly, it introduces an disputes, has fuelled the trend. Popular Science’s website covered offensive capability through an electric – the story under the headline ‘China’s presumably taser-like – weapon. Secondly, Taser-enabled police robot slammed new security Dalek is a bad idea’, also it is the first security robot intended to It is perhaps the mention of its playing a published under license in Business perform anti-terror, anti-riot and anti- role in China’s “anti-riot and anti terrorism Insider as ‘China debuts this awful taser- unrest functions. measures” and protecting against “unrest” armed police robot’. AnBot fails to overcome the well- that has caused a number of international Rather than expressing concern over documented limitations of existing commentators to raise alarm bells over the the possible state uses of the machines, security robots, including the inability new robot. Social media users have been many social media users saw the lighter to negotiate a wide range of terrain and quick to liken AnBot to Dr Who’s Daleks, side. According to Hong Kong Free Press, weather scenarios, and as such its role Robocop’s ED-209 and other cinematic Chinese netizens have been quick to cast remains limited to very little beyond icons of mechanised dystopia. ridicule on the new robot: “Poor people providing a prototype for what is possible. Frances Eve, a researcher at NGO can no longer even get the security job Ultimately, however, it is the robot’s very China Human Rights Defenders, is quoted available,” said one. “I don’t believe it. Try role as such a prototype that makes the by CNBS as commenting “Continued and catch me, catch me! Do you know AnBot a most justified object of dystopian political interference in China’s law how to go down staircases?” said another. discomfort.

June / July 2016 nzSecurity 23 NZSA training evaluation result raises questions

By Nick Dynon

In an NZQA Report of External NZQA external evaluation and review the assessment was conducted in early Evaluation and Review of February The New Zealand Qualifications 2015 and using data from 2014, and the 2015, NZSA’s Training Division received Authority (NZQA) is responsible issues raised at the time have all been a ‘Not Yet Confident in educational for managing the NZ Qualifications addressed.” In relation to unit standard 27364, performance’ result. It’s a surprising Framework in order to ensure that kiwi qualifications are regarded as the EER noted NZQA’s concern over result for an organisation that credible and robust. As part of this, the “‘questions marked as correct but the describes itself as having “taken a Authority is responsible for ensuring answer is incorrect’ and vice versa” – leading role in raising the quality that tertiary education organisations instances that the NZSA’s own moderation of training being offered across the continue to comply with “statutory processes had identified. Although it is to industry.” policies and criteria after initial NZSA’s credit that it had itself picked up But before the alarm bells start ringing, programme approval and accreditation these errors, their existence clearly raised it’s worthwhile noting that the result was and/or registration is granted.” It question marks. based on the performance of the NZSA’s achieves this via the external evaluation According to NZSA, the inaccuracies Training Division during 2014. EERs and review (EER) regime. can be attributed to having to contract occur around once every four years, so it’s According to the NZQA’s website, temporary instructors/facilitators to a long time between reviews and it should each EER “provides an independent meet the massive surge in demand for also be noted that the EER result for the judgement of the educational performance mandatory training in 2014. “The NZSA NZSA’s Training Division was “Confident and capability in self-assessment of has always been transparent with its in capability for self-assessment”. all non-university tertiary education moderation processes and had become One would assume that things have organisations (TEOs).” By ‘educational aware through its own moderation moved on since then and that issues performance’, what NZQA means is “the that several assessors employed on a have been addressed, but the result extent to which the educational outcomes temporary contract basis in 2014 were not nevertheless poses questions of an achieved by the TEO represent quality consistently meeting required standards”, organisation accredited for delivering and value for learners and the wider stated Mr Morrison. Mandatory Training (unit standards 27360, community.” The NZSA provided further coaching 27361, 27364), National Certificate in NZQA reports its judgements as and training to these assessors, but Security Level 2 (LCP1, LCP2), National one of four levels of confidence: Highly eventually terminated their contracts Certificate in Security Level 3. Confident, Confident, Not Yet Confident due to ongoing performance concerns. and Not Confident. So, how is it that the According to Mr Morrison, since 2015 all NZSA Training Division received its ‘Not assessments have either been conducted Yet Confident in educational performance’ at a senior management level or subjected result, and what does it mean? NZ to a 100 percent verification process by Security Magazine spoke with NZSA CEO senior staff. Gary Morrison to find out. “We also note that the Skills Organisation has stated within the same EER findings valid… but no longer external post-assessment moderation visit valid? report that NZQA refers to regarding “The NZSA places a very high focus on the 27364 results that “Your assessors raising standards across all areas of the are following best assessment practice security industry and including the content and the NZSA has robust internal quality and delivery of training to industry,” said assurance procedures in place,” he said. Mr Morrison. “We do accept that having the NZSA Training Division receive No time to manage training? an assessment of “not yet confident in In its findings, NZQA noted that NZSA educational performance” from the EER training directors/managers “were heavily Gary Morrison NZSA CEO is not a good look, however we stress that involved in frontline training delivery and

24 nzSecurity June / July 2016 Keypad, proximity cards and magnetic stripe card options available

Convenient and secure

User friendly

CO Series Open platform Keypad Locks Up to 2000 users

Stand alone, full access control

For more information, contact Allegion (New Zealand) Limited on 0800 477 869 or visit www.allegion.co.nz

www.allegion.co.nz lacked the time, capacity and resources Mr Morrison stressed that the NZSA 2015, he said the NZSA implemented tonz security_magazine_v2_1113.inddmanage and reflect on 1 training has always acknowledged and supported a new student management14/11/2013 software 12:10:03 p.m. management and operations.” the government’s Tertiary Education package that has enabled it “to produce This, it suggested, was the likely reason Strategy and especially in relation to a range of reports that support the behind areas of concern that included the its dealings with priority trainees. “It identification of trends and continuous NZSA’s lack of a policy to support priority is important to note that the NZQA business improvement.” trainees as identified by the government, were looking solely at the Mandatory Invited to make general comment on the abovementioned assessment errors, Training, and that is an area that is set the issue, Mr Morrison told NZ Security and that the association was “yet to by regulation that we cannot change, but Magazine that at both a CEO and board enhance its information systems and we do strive to give all learners the best level, the NZSA’s leadership has “utmost further harness the value of the qualitative confidence in the current state of the data it collects.” NZSA Training Division and in our ability Mr Morrison doesn’t agree with Mr Morrison to achieve an improved assessment in this statement. “Whilst the NZSA does future external evaluation reviews.” not necessarily accept the validity of stressed that the “Over the last eighteen months we this statement,” he stated, “subsequent have made significant changes to the structural changes within the organisation NZSA has always structure of the training division and have ensured that this is no longer a implemented system and process changes concern. We also note that the NZQA acknowledged that have provided improved quality found NZSA’s capability in self-assessment and business controls. We are also very effective and that the association is and supported the confident that ongoing Skills Organisation moving in a positive direction”. moderation assessments will continue to The structural changes he refers to government’s Tertiary identify that we operate to best practice include the full integration of the NZSA standards and that our processes and Training Division into the organisation Education Strategy procedures are robust and appropriate.” from a previous model that had it To be fair, the EER identified a whole operating “as a stand alone entity within and especially in bunch of things that the NZSA was doing the Association and without the ability well. The report, in reality, is littered to call upon other resources as and when relation to its dealings with “Adequate” and “Good” ratings, required.” with a good deal of positive comments with priority trainees. throughout. Addressing EER recommendations “As the peak body of the security In conclusion, the EER presented possible opportunity to meet the required industry,” states the report, “NZSA is a number of recommendations, standard. As an Association we ensure that leading a lot of changes in the sector, including that the NZSA consider how our programmes are reflective of New particularly in advocating a cultural change it can contribute (and demonstrate Zealand’s cultural and ethnic diversity”. so that training and qualifications are valued. its contribution) to the government’s He also confirmed that the NZSA had This is not a simple mission. The association Tertiary Education Strategy, especially addressed the EER’s recommendation has good representation on the Targeted in relation to priority trainees [Maori, that the association “explore ways to Review of Qualifications and appears well Pasifika] which is required of all training analyse its quantitative data, identify prepared for designing new programmes providers regardless of their source of trends and use the findings to inform that lead to the replacement New Zealand funding. continuous improvement decisions.” In qualifications when the time arrives.”

June / July 2016 nzSecurity 25 Institute Takes A Stand Against Unlicensed Investigators by Ron McQuilter, New Zealand Institute of Private Investigators Chairman

In May it was reported in the media the course at Charles Sturt was not one “Private Investigators escape prosecution of them”. It is not known what other fire for working without a licence”. Read qualifications the investigator has. When the article here http://www.stuff.co.nz/ the insured complained to the insurer business/79602896/private-investigators- and then decided to take legal action, the escape-prosecution-for-working-without- recorded statements he had provided in a-licence Typically, we again see the support of his claim to the investigator actions of a few individuals tarnishing got erased. The upshot was that the the good work done by the majority of insurer got slammed and had to pay the professional investigators. insured – see the article here http://www. The case in point related to an stuff.co.nz/business/money/6753517/10- individual who put forward a defence that 000-payout-over-AMIs-failures he was not a usual private investigator So the question remains, why did but a “specialist” carrying out “scientific” this individual escape prosecution and work in relation to crash and fire insurance why has no-one been prosecuted since claims and that he could have simply the news laws were introduced in April Ron McQuilter, CFE is Managing Director been an “assessor”. Yet, it was obvious to 2011? Licensing of Private Investigators of Paragon New Zealand now based in everyone that his conduct, investigating in New Zealand first came into force Tauranga and can be contacted by email claims, interviewing claimants, taking in the 1974 PISG Act. Under the old [email protected] recorded statements, creating scene Act the Registrar could only deal with reconstructions, etc is actually duties of an licensed private investigators, anyone Just what message are the DIA sending insurance claims investigator, an insurance acting without a licence had to be in a profession that is entirely based assessor quantifies the loss. investigated by the Police. The new Act on a person’s ability to know the law. Compounding this matter was the commencing 2011 was supposed to Investigating an insured’s claim is not to fact the investigator had been touting rectify this anomaly with the Department be taken lightly and if you cannot work for work and been instructed by AMI of Internal Affairs tasked to hold to out you are breaking the law yourself by Insurance on a domestic fire related account both licensed and unlicensed being there in the first place, how can you claim, with a supporting background of operators. In the case above, it is possibly expect to achieve any sort of having attended a 1 week course in fire reported that the DIA recommended proper outcome for all sides. investigation. The investigator had even the individual be prosecuted but the In closing regarding the above case, joined the Fire Investigators Association chief investigator decided to hold off it is truly remarkable to read that in although the president Ken Leggat said to “encourage compliance” That is all these times, an insurance company such “Most fire investigators completed a range very well, but what about those that have as AMI opted to instruct an unlicensed of qualifications that did enable them to properly jumped through all the licensing investigator given their knowledge of the claim they were professionally trained, but hoops and paid their fees for years. Privacy Act and their obligations relating to the conduct of their agents. To be accepted as a member of ACCREDITED NZIPI a private investigator must agree their application is copied to every other member and that the committee encourages feedback, the applicant must also agree to a credit check being performed and any other relevant enquiry, plus they must provide evidence of their PI licence or COA. Our members agree to work to a Code of Ethics giving the APPROVED public reassurance they are dealing with an accredited and accepted professional investigator. NZIPI has strived for over 30 years to support a strong licensing regime and proper conduct in our profession. It is LICENSED disappointing to read media such as that QUALIFIED PROFESSIONAL above. 26 nzSecurity June / July 2016 Securing better qualifications for industry by Wayne Abel

t is crucial that workers in any indicates what security graduates are to NZQA. Once accepted, they will industry have access to a range of expected to ‘be, know, and do’. be finalised and published on the New nationally recognised qualifications These qualifications should also Zealand Qualifications Framework. covering the latest standards. To equip employees with skills that can be The Skills Organisation anticipates Ithis end, The Skills Organisation has transferred across a wide range of security that this process will be completed by been busy over the past couple of years contexts, with only ‘top up’ training September 2016. reviewing the qualifications available to required to fill in job-specific skill sets. It is important to also note that those in the security sector. the qualification itself is not a training The targeted review of qualifications Where are we now? programme. Going forward, training (TRoQ) for this industry commenced The proposed suite of qualifications has providers will need to develop in early 2014. This involved a Sector been approved by NZQA to commence programmes that can meet the Review Group – consisting of industry, development. Meanwhile, the Sector requirements of the graduate profile. associations, subject matter experts, Review Group has been tasked with This may be done through unit the ITO (The Skills Organisation), and further developing details around the standards, provider modules, or a mixture training providers – proposing a potential qualification to ensure they are what the of the two, depending on what the suite of qualifications. industry requires. training provider wants to do. Part of This suite covers a broad span of The next steps are for the Sector NZQA’s reasons for such a substantial security qualifications, including both Review Group to critique these draft change in qualification development was certificates and diplomas ranging from qualifications, and once this is completed, to provide more flexible training and levels 3 to 6. they will be posted on The Skills delivery methods for qualifications. Organisation website, where the public The Skills Organisation looks forward What can employers expect? will be invited to submit feedback over a to the qualification being finalised, and The main outcome from this review two-week period. invites the industry to submit their ideas is likely to be a simplified qualification When this process is completed, and feedback regarding its development. structure, with a graduate profile that the qualifications will be resubmitted Wayne Abel Achieve long term business success

Invest in workplace training

The Skills Organisation 0508 SKILLS (0508 754 557) skills.org.nz

June / July 2016 nzSecurity 27 Excellence in Physical Security: A Human Systems Approach

Jas Qadir, a Masters in Engineering Project Management candidate at AUT University, asks do the policies/work culture of an organisation drive its physical and access security needs? This article draws from his research.

We all have, at least once, propped open In other cases, we have security Participants in the study suggested doors for house staff carrying cups of systems in our workplaces that generate that in comparison to overseas countries coffee as a matter of courtesy in our ‘goal conflicts’ between the security they detected an overly complacent workplace. We have also propped doors practices and productivity levels approach here: the “we are safe and open for colleagues in the work place demanded. Such systems effectively secure” New Zealand attitude. The who might have forgotten their access force staff to abandon or to interfere study findings suggest a culture among cards at home. These innocent acts of with the system in order to meet targets. employees in NZ that is too tolerant of courtesy – and other very human and Again, this opens opportunities for unauthorised entry into premises and the seemingly harmless practices – can, either casual or planned incursion. creation of multiple identities in access of course, be exploited and result in As part of my Masters in Engineering systems’ databases. breaches of security. Project Management degree at AUT, I was also surprised to find that I decided to look at the ways in which employees struggled with their these potential breaches occurred, and to workplace’s security policies and found find out what we can do about avoiding it uncomfortable to ask security related them. My approach was to firstly look at questions to their colleagues on matters the internationally published research on such as mandatory ID compliance. this, and then to talk to people in New The goal conflicts created in these Zealand workplaces to see if the same situations were due to the ‘authority problems and solutions were suggested gradient variation’ or cultural conflict locally. involved, ie. the discomfort felt in the I was surprised to find that according thought of challenging colleagues for to the published research, physical their identification or their purpose for security is compromised more often entering the premises. by people taking advantage of an The research has shown that in many employee’s trusting nature than through workplaces, the people responsible for hacking of technology. Such breaches security place a higher importance on are also more common than breaches by technology rather than on ensuring the computer virus or systems breakdown. implementation of appropriate security The data collected within NZ supported policies in the workplace. Further this, with tailgating and piggybacking research has also shown that there is of colleagues and visitors to workplaces an absence of critical “third-party” noted as the most common forms of perspectives that can assess the security Masters in Engineering Project Management compromise. requirements of an organisation based candidate at AUT University, Jas Qadir

28 nzSecurity June / July 2016 GREAT NEWS! NZ’S finest electromagnetic locks are now possibly the world’s best on the work culture and accordingly find more difficult problems and is simply with our… the technological solution required. This enforcing the easy rules. To break means that opportunities to identify cost this cycle, it has to be possible to and time efficiencies are lost. measure the impact of interventions, Global research on best practices the changes made to try and improve has also shown that technological access security performance in key areas. control methods such as access cards 3. Organisational learning and and biometric scanners are increasingly systematic continual improvement effective when the culture and policies – No technology-based system lasts 4 of a workplace can successfully integrate forever, but neither should they be with them. left to degrade to laughable levels of So what can we do about it? There leakiness before they are replaced. point appears to be three major areas where extra focus could reap rewards: The consequences of physical 1. Design process – The people who security breaches can be monumental, 2016 actually operate physical security in terms of loss of life, revenue, clients systems are the real experts about and/or reputation. The answer does not upgrade. what is practical and sustainable. lie in technology alone, but in pragmatic These subject matter experts can and constantly evolving human-systems assist in a number of ways, for security integration. example by identifying high risk / As the next step towards completing Simply high pressure scenarios where the his Masters in Engineering Project system will be most severely tested. Management at AUT, from July 2016 the best! These scenarios can then be used in Jas is keen to move into a role that trial simulations. allows him to continue to develop his 2. Prioritisation and channelling understanding of the market and its Buy Loktronic. of resources, and measuring emerging opportunities. He is looking Made in New Zealand. improvements – Many security forward to working with industry systems become discredited in experts to make security management the eyes of the users because it is efficient. apparent that the organisation has Jas can be contacted on 022 391 2198 Unit 7 19 Edwin Street Mt Eden Auckland abandoned attempts to control the or at [email protected]. P O Box 8329 Symonds Street Auckland 1150 New Zealand Ph 64 9 623 3919 Fax 64 9 623 3881 0800 FOR LOK www.loktronic.co.nz 21516

June / July 2016 nzSecurity 29

15386 21516 Loktronic NZS Electromagnetic Locks Ads 270x59 _5k.indd30/03/16 1 9:31 AM Security In The News

Advanced Security Group at a Ruatangata West property, and two air Privacy Commissioner, was released to rifles were also stolen from a Mangawhai mark the beginning of Privacy Week. acquires Concord Security property, the air rifles had been stored Nearly half of New Zealanders (46%) Nationwide security integrator Advanced behind an office door. are more concerned about individual Security Group has acquired Concord As well as the obvious concerns privacy issues over the last few years. This Security. “We continue to invest in the about unsecured firearms being stolen by was particularly so for young people aged security sector,” said CEO Mike Marr, criminals, if license holders fail to secure 18-29 years (55% more concerned), and “and the Concord Security business them they run the risk of having their those with university education (55%). reinforces several of our existing licence revoked” said Snr Sgt John Fagan, “This sort of result tells us that we need geographic regions.” Prevention Manager, Whangarei/Kaipara to revisit the perceived wisdom that is Brian Fleming, Concord Security Police. out there about how younger people view MD said he is very pleased to see the privacy,” said Privacy Commissioner John amalgamation of Concord Security and Public attitudes to data Edwards. its staff into the Advanced Security A large majority of respondents (75- Group, and that it will provide added sharing cautious but 81%) were concerned about issues related opportunities ahead. shifting to identity theft, credit card and banking Advanced Security is New Zealand’s According to a recent report by UMR details, businesses sharing personal largest dedicated corporate and industrial Research Ltd, approximately two-thirds information and security of information. electronic security provider, with a range (65%) of New Zealanders continue to Respondents expressed a decreased of corporate and government clients be concerned about privacy. This result level of concern about the way and supported by 13 branches across the is statistically unchanged from previous government (59% concerned) and health country. This latest acquisition follows six surveys in 2014 and 2012. The public organisations (47% concerned) are sharing others, including South Island integrator opinion survey, commissioned by the information. This represents a decrease of Struthers Electronics & Security in late 8% and 6% from 2014 respectively. 2014 and Systems.Com in 2010. “We must be located where our customers are and we will continue to reinforce existing Advanced Security branches as well as establishing new branches around New Zealand,” said Mr Marr. Concord was founded in 1976 and operates across the Auckland, Waikato, and Bay of Plenty regions. Founded in 2002, Advanced Security continues to maintain an average growth rate of 30 percent per annum.

Northlanders asked to review firearm security after burglaries According to a 26 April Fuseworks Media report, Northland Police are reminding firearms licence holders to review their security, regardless of their remote location, after three separate burglaries involving stolen firearms over one weekend in late April. Between Sunday 24th and Monday 25th April, four shotguns were stolen from a Ruawai property. The report noted that the firearms were brand new and not stored securely. Between Friday 22nd and the following Monday, three firearms and ammunition were stolen from a gun-safe

30 nzSecurity June / July 2016 In a new part of the survey, Loop regularly in an attempt to make respondents were asked about their people feel safe after an attack on a young attitudes to personal data being shared female jogger the preceding Friday. between organisations. A majority (62%) “We are so proud to announce our felt “We should not share data as the risks latest patrol. NDS wants to “Give back” to people’s privacy and security outweighs to our community,” stated a post on NDS’ SECURITY TECHNOLOGY RELIABILITY the benefits”, while 38% had a view closer Facebook page just hours after the initial to “We should share all the data we can patrol. The post has been ‘liked’ by 2,600 because it benefits the services and me.” social media users and shared 1,113 times Significantly, respondents were more so far. your open to data sharing when safeguards were The 113 comments elicited by the post put in place. A majority were willing to were overwhelmingly positive: “Awesome electromagnetic share data as long as they could opt out if idea hopefully there will be patrols after lock they chose (57%); there were strict controls dark? Because that is the most dangerous on who can access the data and how it is time”, stated one; “Cameras be good too. used (59%), and data is anonymised and Is such a shame it has come to this tho”, they couldn’t be identified (61%). stated another. “Needed and appreciated. UPGRADE Bicycle patrols are quick, effective and DETAIL 1 NDS provides pedaling inexpensive,” commented another The 6 mm wider thankful local. guards for Hatea Loop armature allows for a greater margin Early on the morning of 6th May, security guard Josh Rapata patrolled Whangarei’s Police Station security to be of misalignment in Hatea Loop on bicycle. It was the first reviewed the vertical plane. daily two-wheeled patrol of the loop by According to the NZ Herald, Police PLUS, the MBS will Whangarei-based Northern Districts announced in April that 105 stations not falsely report Security (NDS). have been identified as needing increased misalignments. At the behest of the initiative’s security following an attack on a volunteer instigator, general manager Jean-Pierre manning a public counter in Counties- Dignon, NDS employees will cycle the Manukau. It is also in the wake of an

Standard features include: • Field-selectable 12 & 24 VDC options • 550 kg holding force • Slimline styling • Instant release • Stainless steel fitting hardware • Through hardened, polished stainless sex nut • Full protection against transients. • Door Position Switch • End-to-end Magnetic Bond Sensor

Unit 7 19 Edwin Street Mt Eden Auckland P O Box 8329 Symonds Street Auckland 1150 New Zealand Ph 64 9 623 3919 Fax 64 9 623 3881 0800 FOR LOK www.loktronic.co.nz 21516

June / July 2016 nzSecurity 31

15386 21516 Loktronic NZS Electromagnetic Locks Ads 270x59 _5k.indd24/03/16 2 1:32 PM incident where a man fired shots inside Police drop bouncer assault Z Energy faces violent the Palmerston North police station in August last year and a more recent attack charge robbery epidemic on a police officer at the Hamilton police In a 7 May report in Queenstown’s A 13 May Radio NZ report has station. Mountain Scene, Police have dropped an described an “epidemic” of highly- “Acting Assistant Commissioner assault charge against the daughter of an orchestrated and violent robberies that District Operations Bruce Bird said election candidate – more than 18 months have targeted Z Energy service stations tonight that the exact locations will not be after the incident. in Auckland. The company says its revealed for operational reasons,” stated “Zoe Veint, 22, was accused of workers have been victims of a number the 21st April report. Police confirmed a repeatedly punching a bouncer who of robberies involving ram raids and nationwide initiative to improve station was restraining her boyfriend Nathan sledge hammers. security would include immediate security Proctor at 1.30am in Searle Lane on 20th Chief executive Mike Bennetts improvements for 105 smaller stations. September 2014,” stated the report. “Later stated that Z Energy is now elevating its Assistant Commissioner Allan that morning, her father, James Veint security protocols, upgrading hardware Boreham said potential security stood on the Ban 1080 Party ticket.” and posting security guards on their sites improvements may include issuing staff Mr Proctor’s arm was broken in at night. with safety alarms and adding more a scuffle after he had left a bar of his This news comes just under two CCTV cameras. Police also announced own accord despite initially refusing months after Z announced it was rolling some volunteer-staffed kiosks have been to leave. He was jointly charged with out licence plate recognition software to temporarily closed and will remain so until assaulting bouncer Neil Kirk. Mr Veint keep its sites, staff and customers safe. the completion of a more comprehensive told Mountain Scene at the time that the The 19 February news item audit. two attending bouncers had been “heavy- published on Z’s website stated that According to the Herald, independent handed”, but Allied Security boss Ed Stott the licence plate recognition software is sources and Labour MP and Auckland denied this. the latest in a string of state-of-the-art Mayoral candidate Phil Goff, several No assault charges were laid against security measures implemented by the Auckland City, Counties-Manukau and security staff. Both Mr Proctor and Ms company, which include smoke cannons, Waitakere police stations are due to be Veint pleaded not guilty. SelectaDNA mist and an $8 million closed as a result of the review. Police Police withdrew the charge against Ms digital CCTV network on each site. Minister Judith Collins and the police have Veint and downgraded the charge against “This technology, coupled with Z’s spoken out against such claims, saying they Mr Proctor to disorderly behavior, having cutting edge digital CCTV technology, are incorrect. taken into account the level of the charge, is already making a huge difference on the costs involved and the likelihood of a Z sites, particularly in preventing ‘drive- conviction. offs’ which cost Z around $1.5 million Win for council contract Mr Proctor admitted disorderly per year,” said Z’s General Manager of cleaners and security behaviour and was fined $500. Retail, Mark Forsyth. guards In a 16 May media release, the union E tū’s has congratulated the Wellington City Council for “sticking to its guns” and securing the Living Wage for its contracted cleaning and security staff. This follows talks between the council and the Chamber of Commerce which in March agreed to drop legal action related to implementing the Living Wage for its contract staff. Last week the Chamber met with the Council to discuss its threat to seek a judicial review of the council’s decision to pay the Living Wage to contract workers. E tū’s Assistant National Secretary, John Ryall says the result entailed the Chamber agreeing that remaining contracts for this year would provide the Living Wage to contractors. The increase is effective from 1st of July, and will mean a big pay rise for about 15 security guards and around 20 cleaners. “This is a marvellous victory that’s been a long time coming,” said Mr Ryall. “It means a pay rise of about 25 per cent for these workers.”

32 nzSecurity June / July 2016 SECURITY TECHNOLOGY RELIABILITY your electromagnetic lock

UPGRADE DETAIL 2 Unsightly galvanic action on plates is eliminated through BOTH Electromagnet and Armature being Electroless Nickel Plated.

“When we identify a vehicle involved Spike in weapon seizures in a drive off, the number plate is captured in the system and if that at Christchurch courts vehicle comes onto any Z site again, the Radio NZ reported on 24th April technology immediately recognises the that more weapons are seized outside plate, focuses cameras on the vehicle and Christchurch courts than anywhere else driver and turns the pump on to pre-pay, in New Zealand, “yet there will be no preventing the vehicle from filling up security report on the city’s new justice without paying. precinct.” “Additionally, the quality footage we According to the report, about 45 now get through this software and digital percent of the weapons seized at courts CCTV aids the police in identifying last year were from Christchurch. “There people and increases the odds of catching were 39 weapons, mostly knives, seized them. Already in this pilot we’ve reduced outside Christchurch courts last year, 45 drive-offs by up to 80 per cent at some percent of the national total,” it stated. sites,” he said. This constituted three times as many as Mr Forsyth said Z had partnered was seized in Auckland, Waitakere and with Auror, an Auckland-based Manukau courts combined. company developing an innovative crime Despite these statistics, documents prevention platform, and Focus Digital revealing the seizures obtained through Security, an implementer of ANPR the Official Information Act, also showed technology, to deliver this solution across that the Ministry of Justice did not have Options include: the country. a security report prepared into its new • Header extension angle bracket He said that the three companies were Christchurch precinct. • Custom full width housings “A ministry spokesperson said the also working on applying the technology • Z/L brackets for inward opening doors so that if a stolen vehicle comes onto a new justice and emergency services Z site an automatic alert is sent directly precinct’s design had taken into account • Frameless glass door brackets to Police alerting them to the vehicle’s the threats facing each of the agencies • Powder coated or anodised colours location. “We want to get the message that would use it, including the courts,” • Stainless indoor, outdoor and out loud and clear that we’re not going to stated the report. gate locks stand for anything that makes our sites, Of the 100 or so weapons seized by our staff or our customers unsafe,” he security at New Zealand courts last year, said. 95 percent were knives. Air pistols, a The ‘epidemic’ of recent violent tomahawk and a crossbow have also been robberies suggests that this message discovered by court security. Unit 7 19 Edwin Street Mt Eden Auckland P O Box 8329 Symonds Street Auckland 1150 New Zealand hasn’t yet made its way to Auckland’s Ph 64 9 623 3919 Fax 64 9 623 3881 0800 FOR LOK organised crime community. www.loktronic.co.nz 21516

June / July 2016 nzSecurity 33

15386 21516 Loktronic NZS Electromagnetic Locks Ads 270x59 _5k.indd24/03/16 3 1:32 PM New Zealand to finally get a Computer Emergency Response Team The Government has announced that security,” stated Communications Minister it will invest $20 million of operating Amy Adams. funding over the next four years on a new “Our national CERT will be a key national Computer Emergency Response piece of New Zealand’s cyber security Team (CERT) to combat cyber-attacks and architecture. It will be the central place cybercrime, with an additional $2.2 million for businesses and organisations to go to of capital for set up. for help and information when they’re A CERT is an organisation that experiencing cyber-attacks,” said Ms receives cyber incident reports, tracks Adams. The CERT also becomes a core cyber security incidents or attacks, and part of the government’s Cyber Security provides advice and alerts to its customers Strategy and Action Plan launched last on how to respond and prevent further December. attacks. CERTs also work closely with With cybercrime having cost the New international counterparts to prevent and Zealand economy $257 million and having respond to cybersecurity incidents, and affected more than 856,000 New Zealanders address cybercrime. in 2015, the CERT announcement has been Over 100 countries already have broadly welcomed by industry. There are CERTs, and Australia’s has been operating differing views, however, on whether the for more than two decades. The recent government’s preference towards an optional The Hon Amy Adams, Minister for Justice, recently CERT announcement is widely seen as a – rather than mandatory – regime for the announced the new CERT case of New Zealand joining the CERT reporting of cyber breaches by organisations club very late in the piece. is the right approach. Minister Adams has also announced “Establishing a national CERT means Symantec’s technology strategist, Mark the creation of an Advisory Board to New Zealand joins an international Shaw, for example, was cited in a recent advise her on setting up the CERT. network of CERTs, improving our access Interest.co.nz article as saying “the CERT “There is substantial experience in to information on potential or real-time is toothless without it being mandatory for cyber security in the private and non- cyber-attacks. It will help us play our part organisations to report significant cyber government sectors – and I intend to in a global effort to improve internet security breaches.” He is not alone. tap into that as CERT NZ will not reach its full potential without a strong voice representing our private sector guiding its establishment and operation,” she said. “We know from our international partners that that involvement of the private sector is critical to success of the CERT.” The Board will have up to nine members, constituted by a mix of cyber security experts from the private and public sectors. It will provide advice on the establishment, operation and longer- term organisational form of the CERT and the transition to it. The Board will also be expected to build strong links with the CERT’s key customers. The CERT will initially be established as a separate unit in the Ministry of Business, Innovation and Employment and is expected to commence operations in the first quarter of 2017.

34 nzSecurity June / July 2016 Automotive cybersecurity:

is car hacking really a thing? SECURITY TECHNOLOGY RELIABILITY

NZ Security Magazine’s June 2015 cars offer innovative features and services, issue carried a story about US-based such as keyless entry, ignition control, whistleblower and IT expert Chris tire pressure monitoring, diagnostic, your Roberts, who allegedly manipulated an navigation, and entertainment systems, electromagnetic airliner’s engines mid-air by hacking there is a potential downside. According to into onboard systems via the in-flight Argus Cybersecurity, “these new features lock entertainment unit (“High wiring: the man also increase vehicles’ cyber attack surface, who hacked a plane”). The FBI took Mr so the more sophisticated modern cars Roberts’ claims very seriously, and since become, the more vulnerable they are to UPGRADE then have also turned their attention to cyber attacks.” emerging concerns over car hacking. In late April, two bills were sponsored DETAIL 3 In a Public Service Announcement into the Michigan senate that would Dislodging of the (PSA) issued on 17th March, the FBI regulate that state’s emerging connected Door Position Switch officially bought into the emerging issue and autonomous vehicle industry. Under is now almost of car hacking, confirming that security the proposed legislation it would become impossible through researchers evaluating automotive a felony to “intentionally access or the flexible (non-rigid) cybersecurity were able to demonstrate cause access to be made to an electronic fastening technique remote exploits of motor vehicles. “The system of a motor vehicle to willfully adopted. analysis demonstrated the researchers destroy, damage, impair, alter or gain could gain significant control over vehicle unauthorised control of the motor functions remotely by exploiting wireless vehicle.” Transgressors could face up to communications vulnerabilities.” life in prison. The PSA cited an August 2015 Such jail time may seem excessive, whitepaper in which researchers were but, after all, we are talking Michigan, able to accomplish a number of vehicle home to the ‘Motor City’ of Detroit, function manipulations, including: engine the headquarters of the US automotive shutdown, brake disabling and steering industry and the home of General (in a target vehicle travelling at 5-10 Motors, Chrysler and the Ford Motor mph); and door locking, turn indicating, Company. and tachometer, radio, HVAC and GPS But not everyone’s convinced that car operation (in a vehicle at any speed). hacking poses a real threat. According to In another 2015 case, researchers tech journalist David Pogue in a recent Charlie Miller and Chris Valasek were article in Scientific American, it generally able to control a Jeep Cherokee remotely takes expert teams several months to from kilometers away by exploiting the successfully hack into a vehicle. “Here’s car’s entertainment system, which was the simple truth. No hacker has ever taken connected to the mobile data network. remote control of a stranger’s car. Not The pair were able to fiddle with the once. It’s extraordinarily difficult to do. It vehicle’s air conditioning, transmission, takes teams working full-time to find a way and even its steering controls. Following to do it,” he wrote. this, Fiat Chrysler launched a safety recall Chris Valasek, the expert hacker who Standard features include: of 1.4 million recent model cars deemed was part of the team that eventually pulled • Field-selectable 12 & 24 VDC options vulnerable to remote exploit. off the Jeep Cherokee hack, told CNBC, • 550 kg holding force Automotive hacking, we are being “I’m more afraid of someone texting and • Slimline styling told, is a natural consequence of cars driving and running into me than I am of • Instant release becoming ‘connected’. While connected someone hacking my car.” • Stainless steel fitting hardware • Through hardened, polished stainless sex nut • Full protection against transients. • Door Position Switch • End-to-end Magnetic Bond Sensor

Unit 7 19 Edwin Street Mt Eden Auckland P O Box 8329 Symonds Street Auckland 1150 New Zealand Ph 64 9 623 3919 Fax 64 9 623 3881 0800 FOR LOK Is it really possible that a car hack could do this? www.loktronic.co.nz 21516

June / July 2016 nzSecurity 35

15386 21516 Loktronic NZS Electromagnetic Locks Ads 270x59 _5k.indd24/03/16 4 1:32 PM Australia Round-up

Australian security 800 specialist jobs – committed by the them only to be told by one of the guards, government to improve Defence’s cyber “if you don’t shut up you’ll be chucked personnel in fatal Baghdad and intelligence capabilities through the out”. She also accused a female security shooting 2016 Defence White Paper. officer of telling her that she was “at According to a Nine News report, former “If we are to fully realise the social, fault” for bringing her children to the Australian soldier Sun McKay is in custody economic and strategic benefits of being event. at a military base in Baghdad after a fatal online, we must ensure the Internet Ms Perkins also tried to involve a police shooting at the Australian Embassy in continues to be governed by those who use officer at the festival, but was told unless Iraq. The victim, 34-year-old fellow Unity it—not dominated by governments,” Mr she wanted to lay charges against the man, Resources Group employee Chris Betz, Turnbull said. “Equally, however, we cannot it was not a police matter. She said she was fatally shot in the head. allow cyberspace to become a lawless planned to file a formal complaint with the Foreign Minister Julie Bishop refused domain. The private sector and government security company and had filed a complaint to comment on the incident, saying that sector both have vital roles to play.” to police about their duty of care. an investigation is being conducted. She Among the strategy’s initiatives is Australian Capital Territory police did, however, state that the death was not the relocation of the Australian Cyber confirmed they had received a complaint related to the broader security situation in Security Centre from the ASIO building about an officer’s conduct, and said police Baghdad. in Canberra to make it more accessible to had provided advice to Ms Perkins on how Unity Resources Group, a Dubai-based the private sector. The details of the new to make a complaint against the security Australian security company, is contracted location have not been disclosed. officers at the festival. Festival security by the Australian Government to guard $30m will be deployed to build a provider ISEC declined to comment on the embassy. The purpose-built facility, Cyber Security Growth Centre with the the incident. situated in the city’s ‘green zone’, was private sector to coordinate a national initially guarded by ADF troops but with cyber security innovation network. Perth man allegedly the withdrawal of Australian forces from Another $47m will be spent to establish Iraq, URG was hired to provide security. joint intelligence sharing centres in state bashed by security in Bali Many of URG’s personnel are former capitals. A 33-year-old said he was attacked at Australian special forces soldiers. A combined $41m is also being around 1am on 2 April while partying The provision of security at Australian allocated to enhance the capabilities at Sky Garden Nightclub in Bali with a embassies is big business. In February of Australia’s Computer Emergency friend. The man has since returned to 2015, the Sydney Morning Herald Response Team (CERT Australia) and Australia after undergoing surgery in Bali reported that the Australian government recruit more cyber security specialists to to have surgery performed on his skull had spent more than a quarter of a billion the ranks of the AFP, Crime Commission, and broken nose. dollars on private military contractors to and Australian Signals Directorate. According to a 20 April report in WA protect high risk diplomatic posts. Today, an off-duty freelance Australian According to the report, two private Woman urinated on cameraman claimed he had found the military companies had earned more injured man “covered in blood and beaten than $237 million dollars for guarding at festival criticises to a pulp” near the notorious nightclub. Australia’s Kabul and Baghdad embassies ‘patronising’ security Still dazed from the attack, the Perth man told the cameraman he had been attacked and providing “close personal protection” response for Australian diplomats in Afghanistan by nightclub security guards. A woman who claims she was urinated and Iraq over a five-year period. Another “I’ve just seen one of my mates getting on during the ‘Groovin the Moo’ music $26 million had been committed to beaten up, I don’t know what for, I tried festival in Canberra has criticised the security and guarding services over 2014- sticking up for him,” the man said. “It response of security guards. According 16 for the Australian High Commission in didn’t work out very much in my favour to a 27 April ABC News report, she said Port Moresby. because there were at least 12 guys and she had received a “patronising” and they just took me down and then they “inadequate” response from security handcuffed me and beat the shit out of Australia’s Cyber Security guards after she was urinated on by a man me.” Strategy who was “drunk or high”. Sky Garden denied in a statement on According to a 21 April prime The woman was sitting with her Wednesday that its security guards were ministerial media release, the Australian children at the festival when she sensed a involved in an altercation with the man Government’s Cyber Security Strategy will man behind her. She turned to discover but rather that guards had halted the deliver improved cyber security through that the man had urinated on her. incident by handcuffing the individuals 33 new initiatives, funded by over $230 Eventually she was approached by security involved and escorting them out of million directly resulting in more than 100 who took the man away. the nightclub. Kuta police chief Wayan new cyber security jobs. She then noticed a group of guards Sumara supported the nightclub’s version The investment complements the $400 laughing and patting the man prior to of events. million over the next decade - and roughly letting him walk away. She approached

36 nzSecurity June / July 2016 Jail for coward punch Australian Criminal security guard Viko Sausoo Intelligence Commission A Western Sydney magistrate has sent a to combat criminal and coward punch offender to jail following a violent attack on State of Origin night last national security threats SECURITY TECHNOLOGY RELIABILITY year. According to the Daily Telegraph, New criminal intelligence and information magistrate Karen Stafford sentenced agency following the successful 38-year-old Viko Sausoo to 12 months in passage of the Australian Crime prison with a non-parole period of eight Commission Amendment (National your months in Parramatta Local Court on 12 Policing Information) Bill 2015 through May. Parliament, according to Minister for electromagnetic Mr Sausoo punched Sebastian Justice, Hon Michael Keenan MP. Rodriguez Chamorro, aged 22, at The legislation creates a new lock Parramatta’s Albion Hotel about on the Commonwealth law enforcement and evening of 27th May after telling his criminal intelligence agency to be known girlfriend and their family at 9:50pm that as the Australian Criminal Intelligence UPGRADE they had to leave the venue because they Commission (ACIC). It will focus on DETAIL 4 had children with them (the pub was targeting emerging criminal and national Substantially improved not allowed to have children inside after security threats, and will bring CrimTrac DPS Reed Magnet 10pm). and the Australian Crime Commission Mr Chamorro walked out of the (ACC) together under one banner. fastening is extremely venue and got into a discussion with Mr The ACC is the Commonwealth’s secure, making the Sausoo in relation to being required to national criminal intelligence agency product much more leave the venue prior to the end of the with specialist investigative capabilities. Vandal proof. game. He was then hit by the guard on CrimTrac delivers and maintains national the left side of his face, knocking him to information-sharing solutions that enable the ground. Australia’s police and law enforcement Mr Chamorro’s injuries included three agencies to share information across state fractures to the cheekbone as well as and territory jurisdictions. bleeding on the left eye causing blurred “This merger is vital because our law vision. Mr Sausoo pleaded guilty to assault enforcement and protection agencies need occasioning actual bodily harm on March accurate information and intelligence to 18. respond to immediate threats,” stated the CCTV from the venue was submitted minister. “The nation’s law enforcement to the court by the police prosecutor, agencies will be able to use a single data which Ms Stafford watched twice before entry point to feed in and out of the delivering the sentence. ACIC’s IT capabilities where research, “The blow comes so suddenly, this operational data and intelligence will man had no time to see it coming,” stated ultimately provide a big data view of Ms Stafford. “Security guards are often law enforcement information including the victims of assaults. This is not one of imminent threats. The agency will be those cases.” operational from 1 July 2016.

Options include: • Header extension angle bracket • Custom full width housings • Z/L brackets for inward opening doors • Frameless glass door brackets • Powder coated or anodised colours • Stainless indoor, outdoor and gate locks

Unit 7 19 Edwin Street Mt Eden Auckland P O Box 8329 Symonds Street Auckland 1150 New Zealand Ph 64 9 623 3919 Fax 64 9 623 3881 0800 FOR LOK www.loktronic.co.nz 21516

June / July 2016 nzSecurity 37

15386 21516 Loktronic NZS Electromagnetic Locks Ads 270x59 _5k.indd24/03/16 5 1:32 PM Gate locksfromLoktronic–awisechoice. range fromSecuritronandInterlock. mounted locksfromCISA,andaversatile 7 modelsofstrikesbyTrimec andeff-eff,Rim by accessoriestofacilitatefitting. 300kg, 550kg,upto740kg;alllockscomplemented and 7importedmodelswithholdingforcesfrom 6 modelsfromthefamousLoktronicstable, of applications. of electricgateandoutdoorlocksforawiderange Choose fromacomprehensiverangeof23models www.loktronic.co.nz Ph 6496233919Fax 962338810800FORLOK P OBox8329Symonds StreetAuckland1150NewZealand Unit 719EdwinStreet MtEdenAuckland 0800 FORLOK0800 www.loktronic.co.nz 1150 NewZealandPh6496233919 Fax 6496233881 Auckland POBox 8329Symonds Street Auckland Loktronic LimitedUnit719 EdwinStreetMtEden • Heavy gauge 1.2mmgauge Heavy • steel finish white coated powder Durable • rigidity greater for door on return Lip • equipment of benchmounting easy facilitate to backremovableplate and Removableshelf • strength additional for and batteries retain to lip Front • security lockfor Cam • batteries7 14A/h x holds cabinet Large • batteries7 A/h x 5 holds cabinet Medium • bottom and eachknockouts,sides 2 25mm x 6 • cabinet of rear and front to switchanti-tamper providesreed ball Roller • doors on ventilation Louvre • convenience added for doors hinged offLift • mounting easier for anchorpoints key-hole 6 supplies; power of models popular most 5 our for Mounts • Power supply produced inNewZealand. Designed, tested and Loktronic for gatelocks

cabinets

N N d in Z • d in Z • ce L ce L o u o u k k d t d t o r o r r o r o 20756_BP n P n P

i i

d c d

d d

d e

u e

s c

s t

e c

s T

•

s T

, e

n •

s g i d

D e e n s g i 20238_PSC 0800 FORLOK0800 www.loktronic.co.nz 1150 NewZealandPh6496233919 Fax 6496233881 Auckland POBox 8329Symonds Street Auckland Loktronic LimitedUnit719 EdwinStreetMtEden an Flair reeds from Loktronic: sub-miniature, frompush-fittosurfacemount. offset tofloorcontacts,fromlatchguard to collared tostubbies,fromoverhead doorwith from taught-wiretypestowaterguards, from “standard” use,butalsoforspecialtyapplications, range ofFlairReed Switches. Notonlyfor Talk toLoktronic nowaboutourcomprehensive we’ve got thelot. From closedloop, openloopto SPDT, total reedswitch unbeatable combination. solutions fromFlair

d in N Z • e c Lo u k d t o r r o P n

d c

u t

s c

s T

•

D e e n s g i 20237_FL 0800 FORLOK0800 www.loktronic.co.nz 1150 NewZealandPh64 96233919 Fax 6496233881 Auckland POBox 8329Symonds Street Auckland Loktronic LimitedUnit719 EdwinStreetMtEden labelled. are terminals • All Blackx 2 • Rail TerminalsDIN x I • Red x 2 Terminals• Indication LED with Terminals 500 FU 2 Amp 12x DPDT 6 Relay • Drop VDC Fire • Comprises distribution frompowersupplyorbattery, toload. Red andblack uncommitted terminalstofacilitate door lock. Provision fusedpowersupplytoeach forindividual whilstconformingtoregulations. alarm activation onafire removal ofpowertoagroupdoors The Power Distribution Moduleallowsthe Power suppliesfromLoktronic–agreatdeal. inline andPlugpacksDC/DCconverters. in 12and24VDCfrom10-100watts.Plus, 12 and24VDCfrom2.5A-20A.DINrailunits Complete rangeofmonitoredsecurityPSUsin stock options,with100'smoretoselectfrom. Loktronic andchoosefromarangeofover20ex Source allyourpowersupplyrequirementsat www.loktronic.co.nz Ph 6496233919Fax38810800FORLOK P OBox8329SymondsStreetAuckland1150NewZealand Unit 719EdwinStreetMtEdenAuckland produced inNewZealand. Designed, tested and

distribution module Power Loktronic for powersupplies Loktronic

in N Z ed • c Lo u k d t o r r o

P n 20757_BP

d c

u t

s c

s T

•

D e e n s g i 20239_PDM Open Platform VMS Wireless IP Surveillance CustomizedDahua Customized CCTV KitsKits • Award winning best open platform VMS • • We We supply supply fully fully customized customized • Cost effective high performance • Advanced Built-in Video completecomplete CCTV CCTV kits kits in formin form of of wireless access points for Analytics outdoor use Hybrid,Hybrid, Tribrid, Tribrid, IP, I P, CVI CVI etc etc • Complete kits are a great way of • Micromodule crashproof • Stockists of AirMax, AirFiber, • Completereducing kits costs are aand great getting way of the software architecture AirVision, UniFI & mFi series reducing costs and getting the • Includes powerful features products whole package from one place • whole Receive package FREE from support* one place such as Modern GUI, Video • ITPLUS are a Ubiquiti certified Archive, Green Stream, Time and trained partner • Receiveincluding FREE remote support* connection including remoteassistance connection assistance Compressor, Interactive 3D Map, Autozoom etc.

Distributed by Distributed by Distributed by

Ph: 09 950 4940 l E: [email protected] Ph: 09 950 4940 l E: [email protected] Ph: 09 950 4940 l E: [email protected] www.itplus.co.nz www.itplus.co.nz www.itplus.co.nz

DF5200HD-DN DF5200HD-DN/IR DF4820HD-DN - Full HD Box Camera - Full HD Box Camera - HD Box Camera - 1080p @ 25/30 fps - Day/Night with ICR - 3-Megapixel - 720p @ 25/30 fps - Integrated IR Illumination 25m - Full High-Deﬁnition - 1080p @ 120 fps optional - Motor-driven Lens - 1080p/30 - Motor-driven Lens - One-Push Autofocus - H.264 - Wide Dynamic Range - P-Iris Control - Day/Night (ICR) - Day/Night with ICR - PoE (Class 0) - Motor-Driven Varifocal Lens - Ultra Low-Light - IP66 Rated - One-Push Autofocus - P-Iris Control - P-Iris - PoE (Class 0) - PoE (Class 0)

30 fps Ultra 30 fps Ultra 30 fps 2K ICR 2K ICR 3K ICR Full HD Low Full HD Low Full HD H.264 Motor-driven Motor-driven Motor-driven Support Support Support 120 fps Light Day Night Lens 120 fps Light Day Night Lens IR 120 fps Day Night Lens SECURE ACCESS. NO CARD REQUIRED.

Secure mobile access solutions by HID represent a revolutionary breakthrough in next gen technology by combining convenience, flexibility and the power of Seos. With a simple tap or use of our patented “Twist and Go” gesture technology, you’ll experience the most innovative way to make an entrance—no card required. And because it’s all powered by Seos, issuing, managing and revoking access couldn’t be easier—or more secure.

You’ll call it the most advanced way to use your mobile device. We call it, “your security connected.”

YOUR SECURITY. MOBILE | Visit us at hidglobal.com

hid-your-sec-cnnctd-mobile-ad-en-nz-sec.indd 1 7/2/15 9:13 AM