In Brief

Four Low-Cost, High-Yield School Security Techniques

By Scott Berinato

November 07, 2007CSO — Colored lanyards. All faculty, staff and visitors should wear badges attached to colored lanyards (preferably with breakaway clasps), and the colors should correspond to their role (e.g., red for faculty, blue for visitor). Itâ¬"s a simple way to identify people from a distance and also spot suspicious people roaming without a lanyard.

"Hi. How can I help you?" Staff and even students should be trained to ask strangers this question. Note the wording of the question. "Can I help you?" will not work because it gives the person the opportunity to say "No." "Hi" is polite and disarms the person. The word "how" forces the person to state a purpose. An inability to answer this question easily is a tip-off that the person could be up to no good.

Operating profile map. A simple way to understand what needs to be done from a security and access control perspective is to map out your facilityâ¬"s operating profile. Draw a time line that starts at 12 a.m. and ends at 12 a.m. 24 hours. Then draw three lines underneath, one that stretches across the "operating day" when the highest concentration of assets (students) are present. The second line is for facilities, and stretches for as long as some access to the building is needed, regardless of whether school is in session. The third line is for dark hours, when zero access to the school is required. These maps can be made for general operating times and also for weekends or special events and can help stakeholders understand what policies are in place when.

Crisis card. A single laminated card with major risks and proper responses can be made to stick under the phones of staff. Risks are listed in three categories and are color coded: green for environmental risks (e.g., weather), blue for medical risks (e.g., seizure) and red for security risks (e.g., bomb threat). Under each of these categories, the specific risks are listed in order of most likely to occur to least likely.

Source: Paul Timm, Reta Security Inc.

Other stories by Scott Berinato

RESOURCE CENTER
Loading...
VIRTUAL CONFERENCE
Data Center Directions Virtual Conference

Data Center VCAttend this free, 100% online event exploring tools and techniques for making your data center deliver for today and tomorrow.

» Learn more and register here

WHITE PAPER
Maximizing Site Visitor Trust Using Extended Validation SSL

VeriSignNow with Extended Validation (EV) SSL available from VeriSign, you can show your customers that they can trust your site. Learn about EV SSL benefits in the free VeriSign white paper.

» Read the Paper

Featured Sponsors
Sponsored Links

Manage your IT more effectively

Simplify your data center with Juniper Networks. View the webcast

Efficient - Flexible - Compliant

E-LOAN Maintains Reputation as a Privacy Leader with Symantec

Data Loss Prevention: Keeping Sensitive Data Out of the Wrong Hands

Prudential Financial Protects its Brand with Symantec

Envision Identity-Based Access Control for the Datacenter

Digital Identity Protection and Data Security Get Personal

Welcome to the age of Service-Oriented Security (SOS)

When Customer Relationship is Everything, Businesses Bank on SSL Solutions

Everything Today's CISO Needs to Know About Using SSO to Succeed in the Web 2.0 Era

The Case for Business Software Assurance ~ Securing Your Applications

Maximizing Site Visitor Trust Using Extended Validation SSL

Solving Online Credit Fraud Using Device Reputation

Understanding Data Location is Imperative for Data Loss Prevention

5 Steps to Secure Outsourced Application Development

CA's IT Security centralizes your identity management to turn security into a proactive, business-building tool

Secure your virtual and physical environments with the same software

Any company can promise identity protection. Only Debix can prove it

7 Requirements of Data Loss Prevention

Information Security: Data Drains and How to Prevent Loss

How Are Open Source Development Communities Embracing Security Best Practices?

IDC Defines an Identity and Access Management Submarket

Using Likewise to Comply with PCI Data Security Standard

IDC Defines an Identity and Access Management Submarket for Managing Privileged User Accounts and Meeting GRC Requirements

Enabling Compliance with Converged Mainframe Security and Storage

Managing SSL Security in Multi-Server Environments

The Latest Advancements in SSL Technology

How to Offer the Strongest SSL Encryption

Forrester Total Economic Impact (TEI) report: Save Millions in Fraud Losses.

Get in Compliance With Government Data Regulations

Taking the Botnet Threat Seriously