Security Focus Africa April 2019 by Contact Publications

www.securityfocusafrica.com | Vol 37 No 4 April 2019 The official industry journal for professional risk practitioners: security, safety, health, environment and quality assurance

Halo Technology YOUR COMMUNICATION PARTNER

COMING SOON

Jobs by THE EASIEST WAY TO GET YOUR NEW JOB FIND JOBS, EMPLOYMENT & CAREER OPPORTUNITIES

Existing access control system obsolete or out of date?

Switch to Paxton From only R1950 per door!

License free software for life

A 5-year swop out warranty

Itâ&#x20AC;&#x2122;s never been easier, or more cost effective, to switch your existing access control system to Net2. With mobile apps, wired and wireless controllers, and completely license free software, you can switch to Paxton today, from only R1950 per door!

Find out how:

paxton.info/3688 paxtonaccess.co.za

A proven technology

Security Focus Africa: Serving the South African security industry for 37 years

CONTENTS

VOL 37 NO 4 APRIL 2019

www.securityfocusafrica.com | Vol 37 No 4 April 2019 The official industry journal for professional risk practitioners: security, safety, health, environment and quality assurance

Halo Technology YOUR COMMUNICATION PARTNER

16 COVER STORY

HALO TECHNOLOGY: YOUR PARTNER IN COMMUNICATION

The two-way radio communication industry has been revolutionised by the introduction of the HALO PTT radio networks which are GSM based, thus giving you unlimited coverage and allowing for any distance to be obtained provided that cellular coverage is available.

SECURITY FOCUS AFRICA APRIL 2019

FEATURES 13 Cash crime trends and protection in 2019 Despite the risk, cash is still the world’s most widely used form of payment, and the amount of cash in circulation is growing. These are among the findings of the G4S World Cash Report, the first-ever global study on payments, which was released at the Africa and Middle East Cash Cycle Seminar (ICCOS) in Ghana in February 2019 by Paul Van Der Knaap, Global Director of Strategy and Business Development for G4S Cash Solutions.

16 The traditional and emerging threats to the global banking industry Moving from a “hodgepodge of systems, platforms, software and tools” to a “symphonic enterprise” is one of the key challenges facing banks throughout the world today. That’s according to the Deloitte 2019 Banking and Capital Markets Outlook, which believes that excellent data management, modern infrastructure, AI (artificial intelligence) and the cloud need to take precedence in 2019.

Official Journal of the Security Association of South Africa

Published by Contact Publications (Pty) Ltd (Reg No. 1981/011920/07)

Vol 37 No 4

TEL: (031) 764 6977 | FAX: 086 762 1867 PUBLISHER: Godfrey King | gk@contactpub.co.za

MANAGING DIRECTOR: Malcolm King | malcolm@contactpub.co.za

EDITOR: Ingrid Olivier | ingrid@securityfocusafrica.com

PRODUCTION & DESIGN EDITOR:

REGULARS EDITOR’S COMMENT 4 Of Parktown prawns and corruption…

NEWS 8 News snippets from around the world.

ASSOCIATION News 12 SASA committed to professionalising the industry.

CASH-IN-TRANSIT UPDATE 18 Cash-in-transit attacks: Are they decreasing at last?

PERSONALITY PROFILE 20 In conversation with…Kalyani Pillay, CEO of SABRIC.

COMPANY NEWS 22 oneM2M named Top IoT Standards Body of the Year. 23 Sparks sparks a new business. 24 Paxton’s global training reaches more installers than ever before.

EXHIBITION NEWS 27 SIA announces winners of the 2019 SIA New Product Showcase Awards.

ON THE MARKET 28 Keeping the lines of communication open for improved security.

28 Hikvision launches AcuSense network cameras.

29 Field management from MATRIX COSEC.

29 Intrusion detection with visual

Hayley Mendelow | hayley@contactpub.co.za

DISTRIBUTION MANAGER: Jackie Goosen | jackie@contactpub.co.za

HEAD OFFICE PHYSICAL ADDRESS: Suite 1, Fields Shopping Centre, Old Main Road, Kloof 3610

POSTAL ADDRESS: PO Box 414, Kloof 3640, South Africa

PUBLICATION DETAILS: Security Focus Africa has 12 issues a year and is published monthly, with the annual Buyers’ Guide in December.

verification technology.

30 Face to face with Suprema FaceLite at Securex SA 2019.

INDUSTRY OPINION 35 ISO 20000 and easier information security compliance.

INTERNATIONAL NEWS 36 InfiNet Wireless solutions deployed to create digital oilfield.

LAW & SECURITY 37 Service level protests. 38 INDEX OF ADVERTISERS 39 CALENDAR 40 DIRECTORY

Printed by

, a division of Novus Holdings

Paarl Media KZN, 52 Mahogany Road, Westmead www.paarlmedia.co.za

SUBSCRIPTION RATES: Annual subscription for magazine posted in Republic of South Africa is R650 including VAT and postage. Subscription rates for addresses outside South Africa can be obtained on application to the Subscription Department, Box 414, Kloof 3640.

EDITORIAL CONTRIBUTIONS: Editorial contributions are welcome. For details please email hayley@contactpub.co.za.

ADVERTISING ENQUIRIES: Bernadette Fenton Cell: 082 443 8931 Email: bernadette@ securityfocusafrica.com

Security Focus Africa is a member of

www.securityfocusafrica.com securityfocusafrica.com

SECURITY FOCUS AFRICA APRIL 2019

EDITORS COMMENT

Of Parktown prawns and

corruption…

As ugly and as unwelcome as South Africa’s ubiquitous Parktown prawn, corruption, too, thrives in dark, rotting places. Corruption and the extent of its rot throughout South Africa’s state and business sectors continues to shock, with many convinced that our country is one of the worst in the world.

ut according to Transparency International, we’re not. South Africa’s corruption score in its 2018 Corruption Perceptions Index (CPI) is 43/100, and it ranks 73 out of the 180 countries surveyed, which isn’t any excuse for us to rest on our laurels but it does give me hope that all is not lost. The Index ranks countries based on input from experts, on a scale of zero to 100, with zero being “highly corrupt” and 100 “very clean”. No country is completely free of corruption, says the NGO, which goes on to suggest that corruption is contributing to a crisis in democracy around the world. Last year, it notes, more than two thirds of countries scored below 50, with an average score of just 43 – the same as South Africa. Denmark (88) is the least corrupt nation in the world, according to the CPI, followed closely by New Zealand (87), Finland, Singapore, Sweden and Switzerland. The most corrupt countries are Somalia, Syria and South Sudan with scores of 10, 13 and 13 respectively. But, the authors point out, even Denmark has come face-to-face with corruption with Danske Bank, its largest lender, being investigated for money laundering. And the US has now lost its position as one of the world’s 20 least corrupt countries, a position it’s held since

2011. Brazil, too, is under the spotlight, earning its lowest CPI score in seven years. Attributing falling scores to issues such as poor institutional checks and balances, the “erosion of ethical norms at the highest levels of power” and the deterioration of the rule of law, Transparency International managing director Patricia Moreira says: “Corruption chips away at democracy to produce a vicious cycle, where corruption undermines democratic institutions and, in turn, weak institutions are less able to control corruption.”

Getting rid of the bugs According to the latest FNB/BER Consumer Confidence Index (CCI), the country’s confidence has dropped from 7 to 2 points in the last year, the lowest it’s been since the February 2018 election of President Cyril Ramaphosa. Following on his second State of the Nation address earlier this year, in which he spoke of curing the country of the “corrosive effects of corruption” and restoring the integrity of its institutions, it really is time to start putting the guilty behind bars and in so doing, restoring public confidence. The clarion call of its long-suffering citizens is for prosecutions to be fast-tracked. When Pravin Gordhan,

EDITORIAL POLICY Statements made or opinions expressed in articles in Security Focus Africa do not necessarily reflect the official views of the Security Association of South Africa (SASA) nor those of any of the other security associations listed in Security Focus Africa. Similarly, advertising in this publication does not imply in any way endorsement or approval by these security associations of any products or services. It is the policy of the Security Association of South Africa that any office-bearer who has an executive position in a company, or companies, which supply security products or services should on no account allow his position to be used to promote his company or its objectives in the editorial content of Security Focus Africa, the official journal of the Association. If, at any time, an office-bearer’s position has been quoted in relation to his company or product, this does not imply the Association’s approval or involvement.

SECURITY FOCUS AFRICA APRIL 2019

South Africa’s Minister of Public Enterprises, said that government would not only hold those responsible for Eskom’s failures and Medupi’s poor design to account but that some people might soon “find themselves in orange uniforms” it resonated with millions of South Africans. That the Parktown prawn is orange in colour is a coincidence, of course. While doing some research on South Africa’s justice system, I came across this comment by Mark Shaw, project leader and senior researcher, Crime and Policing Policy Project, Institute for Defence Policy: “South Africa’s system of criminal justice is in a crisis. If its ability to prevent, process and deter crime is any measure of its effectiveness, then reforming the system is now not only a necessity but a national priority. Unfortunately, the system is not easily fixed; it is not characterised by a single problem that can be resolved speedily, but is characterised by blockages, many of which cause delays in other parts of the criminal justice pipeline.” Titled “Reforming South Africa’s Criminal Justice System”, he wrote it in August 1996 – that’s 23 years ago!

After the elections In terms of honouring his pledge to South Africa to tackle corruption, President Ramaphosa has established a number of inquiries, most notably the Zondo

securityfocusafrica.com

EDITORS COMMENT

Commission of Inquiry into State Capture. Perhaps the pace of prosecutions will hot up after the elections, which Irish Times writer Bill Corcoran believes will be the case. In his piece titled “Cyril Ramaphosa’s anti-graft strategies seem to be paying off”, he suggests that President Ramaphosa has adopted a methodical approach to “turning the tide of corruption”, striking a balance between “clearing the ANC decks of those believed to be corrupt and incompetent before hard evidence against them has emerged” and maintaining party support in the run-up to the elections. “With this in mind,” says Mr Corcoran, “Ramaphosa’s decision to establish numerous high-level investigations and inquiries into alleged corruption before taking concrete action increasingly looks like the move of an astute politician.” Noting presidential ally Pravin

Gordhan’s investigations into Transnet and other state enterprises and departments, he concludes with these words: “Indeed, rather than destabilising the ANC, Ramaphosa’s corruption-busting activities appear to be increasing his control over the movement, as many of those who would undermine him are now too busy trying to stay out of jail to do so.”

Speaking of jail... If our erstwhile leaders are sincere about bringing the guilty to book, the issue of prison capacity is a bit of a concern, since South Africa’s 239 operational prisons are already overcrowded. According to Africa Check, as of the end of March 2017, South Africa’s prisons had 119 134 bed spaces for an average inmate population of 160 280. By the end of January 2019, the Minister of Justice and Correctional Services Advocate Michael Masutha put the number of inmates at approximately 162 000.

Keeping Your Guard Up securityfocusafrica.com

Africa Check notes further that, in response to a question asked in parliament in 2017, Minister Masutha said that 11 842 foreigners were being held in South African correctional facilities. Of these 7 345 had been sentenced and 4 497 were awaiting trial. Another 1 380 were being prosecuted for being in the country illegally. And then there are the costs of incarceration. According to Minister Masutha, the cost of housing a prisoner was around R133 805 during the 2017/18 financial year. Times that by an inmate population of 162 000 and you get R21.7 billion a year. In googling how to get rid of Parktown prawns humanely, the best suggestions were to get rid of their food sources and to trap them... Or, put another way, send them to jail.

Ingrid Olivier Editor ingridolivier@idotwrite.co.za

• Free trial for guard monitoring solutions. • SMSs, swop-outs & call-outs included. • 24-hour support centre. • Waterproof & tamper-proof. • Battery life up to 72 hours. • Online portal access included. • Live GPS tracking.

*Terms & conditions apply

Tel: 011 551 1687 Fax: 086 218 2928 info@activetrack.co.za Facebook: @activetrackSA www.activetrack.co.za

SECURITY FOCUS AFRICA APRIL 2019

securityfocusafrica.com

SECURITY FOCUS AFRICA APRIL 2019

NEWS IN BRIEF XXX

News snippets from around the world Mokgoro Report says neither Mrwebi nor Jiba fit for the NPA

Yvonne Mokgoro, retired Constitutional Court Justice.

Retired Constitutional Court Justice Yvonne Mokgoro has found that advocates Nomgcobo Jiba and Lawrence Mrwebi are “neither fit nor proper to hold their respective offices within the National Prosecuting Authority (NPA)”. In a scathing 140-page report, which Eyewitness News has seen, Mokgoro recommended that President Cyril Ramaphosa remove Jiba from office as Deputy National Director of Public Prosecutions, as well as Mrwebi from office as Special Director of Public Prosecutions. Compromised integrity; lack of leadership; dishonesty; and a failure to maintain a high standard of professional ethics, accountability and transparency are among the key findings against the pair – who still face a fight in the Constitutional Court against an application by the General Council of the Bar (GCB) to strike them off the roll of advocates. (Source: Eyewitness News)

#DurbanFloods: Corruption blamed for death and destruction

Corruption, a dodgy tender system and the lack of maintenance of the storm water drainage system have been blamed for

SECURITY FOCUS AFRICA APRIL 2019

the recent flooding that led to the deaths of 67 people in and around Durban last week. The search is still on for missing people. The heavy rain, which lashed most parts of the province, also left scores of people displaced. Opposition parties and private companies have put the blame for the deaths and destruction on eThekwini Municipality officials for shoddy and tardy work in ensuring the drainage problems which caused havoc during the massive October 2017 storm that swept through the province were not addressed. They say money approved for repairs was not spent. Following the 2017 storm which destroyed homes, schools, businesses, and vehicles, the executive committee had immediately approved a report which stated that the estimated cost to repair infrastructure damage was more than R576 million. As many as 60 wards were affected with 3 112 households impacted. (Source: iol.co.za)

Competition Commission poised to whack cell giants with a big stick

SA’s cell phone giants have been warned to stop discriminating against the poor and damaging the economy, or face the wrath of the government. In its provisional report into the cost of data, the Competition Commission has slammed the country’s mobile behemoths, in particular Vodacom and MTN. (Source: TimesLive)

Holomisa warns against deregistration of Amcu

AfriForum in bid to have SAHRC’s decision on Malema hate speech overturned

Bantu Holomisa, UDM leader. Julius Malema, EFF leader.

Lobby group AfriForum wants a decision by the SA Human Rights Commission that EFF leader Julius Malema’s statements were not hate speech, overturned. The organisation has filed papers in the Gauteng High Court arguing that there was an “error of law” and that the decision be set aside or taken back to the commission for reconsideration. Five complaints were logged with the commission, including one of a tweet by EFF secretary general Godrich Gardee. (Source: News24)

UDM leader Bantu Holomisa has warned the Labour Department against its plans to deregister the Association of Mineworkers and Construction Union (Amcu), saying it would trigger instability after the Department published a notice in the Government Gazette indicating its plans to cancel the registration of Amcu. Details are still sketchy as to why the department has moved to deregister the influential union, a breakaway from the ANC-aligned National Union of Mineworkers, and which rose to prominence in the labour unrest that preceded the 2012 Marikana massacre. (Source: Independent Media / The Star)

securityfocusafrica.com

NEWS IN BRIEF Gordhan accuses Mkhwebane of ‘behaviour unbecoming of her office’

Public Enterprises Minister Pravin Gordhan and Public Protector Busisiwe Mkhwebane

Public Enterprises Minister Pravin Gordhan has accused Public Protector Busisiwe Mkhwebane of behaving in a manner not befitting her office by falsely accusing him of colluding with others on how to respond to her questions about a so-called rogue unit with the South African Revenue Service (SARS). Gordhan last week released correspondence between himself and Mkhwebane’s office, after consulting with lawyers, saying he was doing so in the public interest. (Source: iol.co.za)

NPA’s new directorate consolidating state capture cases

of capture, has been severely criticised for its paralysis in dealing with allegations of state capture. The new directorate, established by presidential proclamation this year, is to be one of the steps to remedy this. It is to investigate serious crimes related to state capture, which include contraventions of the Prevention and Combating of Corrupt Activities Act, that are the subject of numerous commissions of inquiry. This month, the NPA confirmed the appointment of Matric Luphondo and Andrea Johnson to the directorate, but who will head it is yet to be announced. (Source: Mail & Guardian)

Shock as R1bn fraudulent RAF claims reported

This is the city where you’re most likely to be killed in SA The Road Accident Fund (RAF) detected nearly R1 billion in fraudulent claims in the 2017/18 year, leading to 514 cases being referred to the police for investigation. This emerged last week when a Port Shepstone teacher pleaded guilty in the Durban Commercial Crimes Court to defrauding the RAF more than 11 years ago. (Source: iol.co.za)

Call centre operators allegedly sold SA card details to crime syndicate

“A lot of work” was happening “in the background” to get the newly formed investigative directorate into state capture off the ground, National Prosecuting Authority (NPA) communications head Bulelwa Makeke said last week. The NPA, whose head office has itself been riddled with factional infighting and allegations

customer’s card information. In a statement, the Hawks said that the two suspects are aged between 23 and 29 and were employed as call centre agents for a reputable financial service credit provider in Goodwood (Cape Town). “It is alleged that the duo supplied card holder’s information to a syndicate,” the Hawks said. “Subsequently, counterfeit cards were allegedly manufactured by the syndicate and used for illegal purchases.” Over R95 000 loss was incurred across eight card holders during period between 1 March and 9 April 2019. According to the South African Banking Risk Information Centre’s (Sabric’s) latest card fraud statistics, debit and credit card accounted for R342.2 million and R436.7 million being stolen in 2017 respectively. One of the biggest contributors is counterfeit card fraud which led to R83.6 million being stolen in 2017, the group said. (Source: BusinessTech)

The Hawks’ Serious Commercial Crime Investigation unit has arrested two call centre operators for allegedly selling

You are more likely to be murdered in Cape Town, than any other city in South Africa. This is one of the findings in the 2018/2019 State of Urban Safety in South Africa Report by the South African Cities Network. According to the latest report, Cape Town has “very high rates of almost all crime types.” The report revealed the city had the highest recorded rates of murder, robbery, and non-violent property-related crimes. The murder rate has spiked by 60% since 2009/2010, and by 13% in the last year. There were 69 reported murders per 100,000 Capetonians in 2017/2018, four times more than the city with the lowest murder rate, Tshwane. Johannesburg

A GUARD MONITORING SOLUTION FOR ANY APPLICATION * DB Projects and Agencies

sales@guardreports.co.za 011 888 4982 356 Pretoria Ave, Ferndale, Randburg

* All backed by on-site service

securityfocusafrica.com

SECURITY FOCUS AFRICA APRIL 2019

NEWS IN BRIEF

recorded 31 murders per 100,000 during the same period, while Nelson Mandela Bay had the second highest rate at 54. (Source: Eye Witness News)

New Zealand, France announce bid to end violent extremism online

in the operations. Teams from the United States’ Federal Bureau of Investigation (FBI) and from international police organisation Interpol were in the country assisting local investigators. The Civil Aviation Authority (CAA) also banned the use of drones and unmanned aircraft within Sri Lankan airspace until further notice. (Source: iol.co.za)

Trafficking victims, abused children rescued in Nigeria, Benin

New Zealand Prime Minister Jacinda Ardern

New Zealand and France will bring together global leaders at a Paris summit next month aimed at stopping social media being used to organise and promote terrorism, the countries’ leaders announced. Political leaders and tech company executives have been called to a meeting to be cochaired by New Zealand Prime Minister Jacinda Ardern and French President Emmanuel Macron in Paris on 15 May. They will be asked to commit to a pledge called the “Christchurch Call” designed to eliminate terrorist and violent extremist content online. (Source: News24)

More suspects arrested in Sri Lanka over deadly suicide bomb attacks

Over 200 people, including children, forced into prostitution and heavy labour in Nigeria and Benin, have been rescued by the international police organisation Interpol. In April, approximately 100 police officers carried out Operation Epervier II against human trafficking across Nigeria and Benin, the Premium Times reported. During the raids, which targeted markets, airports, seaports and settlements, police-seized vehicles, cash, cell phones and computers. ”Many of the children were working in markets peddling goods, carrying heavy loads or fetching water, while others worked as housemaids or were forced into prostitution,” the police divisional commissioner of Benin’s Central Bureau for the Protection of Minors and Families and the Prevention of Human Trafficking (OCPM) said. (Source: iol.co.za)

Gold worth billions smuggled out of Africa Police have arrested another 16 people in connection to a series of bombings in Sri Lanka over the Easter weekend, which claimed at least 359 lives. Fresh security measures, including a ban on the use of drones, were introduced as police and security forces continued in their efforts to crack down on the network of people involved in the bombings. The latest arrests brought the number of suspects in detention up to 76. Vehicles used by the suspects have also been seized

SECURITY FOCUS AFRICA APRIL 2019

analysis has found. Customs data shows that the UAE imported $15.1 billion worth of gold from Africa in 2016, more than any other country and up from $1.3 billion in 2006. The total weight was 446 tonnes, in varying degrees of purity – up from 67 tonnes in 2006. (Source: Reuters)

Poland joins Europol’s cybercrime taskforce

Poland has become the latest country to join an international initiative to tackle the growing problem of cyber-crime, such as payment fraud and malware. Europol, the European Union’s lawenforcement agency headquartered in The Hague, has announced that the country has deployed a cybercrime specialist to its Joint Cybercrime Action Taskforce, known as J-CAT. The objective of J-CAT, launched in 2014, is to drive “intelligence-led, coordinated action against key cybercrime threats and targets by facilitating the joint identification, prioritisation, preparation and initiation of cross-border investigations and operations by its partners”. It tackles hitech crimes including malware and botnets; the facilitation of crimes, for example counter-antivirus services and money laundering; online fraud; and online child sexual exploitation. (Source: globalgovernmentforum.com)

US Government lists Kenya as global crime hotspot The US government has listed Kenya among top global hotspots for drug trafficking, money laundering among other economic and organised crime. The list was revealed in the 2019 International Narcotics Control Strategy Report by US Department of State seen by Kenyans.co.ke. “Criminal activities include transnational organised crime, cybercrime, corruption, smuggling, trade invoice manipulation, illicit trade in drugs and counterfeit goods, trade in illegal timber and charcoal, and wildlife trafficking,” read the report. (Source: Kenyans.co.ke) Nairobi, Kenya

Billions of dollars’ worth of gold is being smuggled out of Africa every year through the United Arab Emirates in the Middle East – a gateway to markets in Europe, the United States and beyond – a Reuters

securityfocusafrica.com

MorphoWaveâ&#x201E;¢ Compact BY IDEMIA

ASSOCIATION NEWS

SASA committed to

professionalising the industry

Committed to professionalising the industry, the Security Association of South Africa (SASA) was established 50 years ago. With about 500 members employing more than 120 000 security officers, SASA is the largest and most dynamic organisation of its kind on the continent.

ne of SASA’s aims is to increase the public’s awareness of the statutory mechanisms regulating the industry. It’s hugely important for people to be aware of their obligations, which include only contracting with legally compliant private security companies. The relevant legislation includes the Basic Conditions of Employment Act, the Labour Relations Act and the Private Security Industry Regulatory Authority (PSIRA) Act. It’s in this vein that we would like to draw your attention to section 38(3)(g) of the PSIRA Act which says that any person (who): • “… knowingly or without the exercise of reasonable care contracts for the rendering of security services contrary to a provision of this Act or the Levies Act … • is guilty of an offence and (i) on a first conviction of a contravention referred to in paragraph (a), is liable to a fine or to imprisonment for a period not exceeding five years, or to both a fine and such imprisonment; (ii) on a second or subsequent conviction of a contravention referred to in

SECURITY FOCUS AFRICA APRIL 2019

paragraph (a), is liable to a fine or reference number LR 2/6/3/831 SASA can: to imprisonment for a period not Assist you in carrying out this due exceeding ten years, or to both a fine diligence. Accordingly we have drawn up and such imprisonment; this checklist which we suggest you ask (iii) o n a conviction of a contravention your security company to complete and referred to in paragraph (b), (c), (d), return to you, along with the required (e), (f ), (g), (h); or supporting documents. (iv) i s liable to a fine or to imprisonment Where any question in the checklist for a period not exceeding 24 is answered in the negative and/or the months, or to both a fine and such supporting documents not provided to you, imprisonment.” it is indicative that the security company This section of the PSIRA Act obliges all may be carrying on business unlawfully or persons and entities such as yourselves be in breach of one or more of its statutory to conduct a due diligence on any obligations. If this is the case, you may be security company intended to be committing an offence by employing them. employed by them, or where In such an event, we recommend that a security company is you seek legal advice or contact IF YOU NEED already employed by our offices for guidance. ANY FURTHER them, to carry out In carrying out the INFORMATION, PLEASE a due diligence due diligence exercise CONTACT SASA: periodically. referred to above, you will Office: 0861 100 680 Registered as support us in our efforts Email: admin@sasecurity.co.za an employers’ to eradicate unlawful The full SASA membership list organisation with the security companies in the is available at Registrar of Labour industry and ensure that the www.sasecurity.co.za Relations in terms of employees are treated fairly the Labour Relations Act, and lawfully.

securityfocusafrica.com

SPECIAL FEATURE: CASH CRIME

Cash crime

trends and protection in 2019 MORE AND MORE MONEY IN CIRCULATION

By Ingrid Olivier

Despite the risk, cash is still the world’s most widely used form of payment, and the amount of cash in circulation is growing. These are among the findings of the G4S World Cash Report, the first-ever global study on payments, which was released at the Africa and Middle East Cash Cycle Seminar (ICCOS) in Ghana in February 2019 by Paul Van Der Knaap, Global Director of Strategy and Business Development for G4S Cash Solutions.

ccording to the report, the value of ATM withdrawals in Africa is increasing in all but one of the surveyed countries: 21 per cent in Egypt, 16 per cent in Zambia and 13 per cent in South Africa. Mozambique is the only country on the continent showing a decline. “The enduring demand for cash in Africa is consistent with the trend seen all over the world,” says the report, although the adoption of new technology varies significantly from continent to continent. “Mobile money is uniquely popular in Africa, with over 12 per cent of adults in Sub-Saharan Africa having a mobile money account, but outside of Africa only 2 per cent of adults on all other continents use mobile money to make payments. In Europe, 79 per cent of point-of-sale transactions are conducted in cash, while in North America, where

payments are most regularly used, cash use still accounts for 31 per cent of payments. In Asia, three out of four online purchases are paid for by cash on delivery, while in Europe online purchases are most often paid for by card.”

Threats • ATMs A critical element of a bank’s infrastructure, says Bethwel Opil, Enterprise Sales Manager at Kaspersky Lab Africa, ATMs are, however, often the least protected part of the network, physically separate and sometimes running on out-of-date operating systems. “We have seen an increasing number of attacks on ATMs, either through physical access or via the bank network,” he notes. According to SABRIC (South African Banking Risk Information Centre), ATM crime includes card skimming, swopping of cards, ATM shoulder surfing and the trapping of cards inside ATMs to steal card data or actual cards.

• Cybercrime

card

securityfocusafrica.com

2019 could see the first attacks through the theft and use of biometric data. Says Mr Opil: “Biometric systems for user identification and authentication are being gradually implemented by various financial institutions. Several major leaks of biometric data have already occurred. These two facts lay the foundation

for the first POC (proof-of-concept) attacks on financial services using leaked biometric data.”

The emergence of new, local groups attacking financial institutions in the Indo-Pakistan region, South-East Asia and Central Europe Cybercriminal activity in these regions is constantly growing, with the immaturity of protective solutions in the financial sector and the rapid spread of various electronic means of payment among the population and companies in these regions contributing to this. “All the prerequisites exist now for the emergence of a new centre for financial threats in Asia, in addition to the three that already exist in Latin America, the Korean Peninsula and the former USSR,” warns Mr Opil.

Attacks on mobile banking for business users Mobile applications for business are gaining popularity, which Mr Opil believes is likely to lead to the first attacks on their users. “There are enough tools for this, and the possible losses that businesses incur would be much higher than the losses incurred when individuals are attacked.”

The Internet of Things (IoT) and Artificial Intelligence (AI): the good and the bad On the back of Mckinsey Digital’s predictions that the IoT will have a total potential economic impact of between $3.9 trillion and $11.1 trillion a year by 2025, Mr Opil says the financial industry is very demanding, with multiple factors impacting

SECURITY FOCUS AFRICA APRIL 2019

SPECIAL FEATURE: CASH CRIME it, both good and bad. OTPs and huge hacks “We have seen The combination of IoT “Cybercriminals are always an increasing and AI can illuminate looking for the perfect loophole number of attacks and sometimes they find it in errors and make processes a lot more effortless and on ATMs, either the most unexpected ways,” smoother, he believes. through physical says Mr Opil. “In the banking “The numbers game sector, cybercriminals are access or via the targeting one-time passwords has its complexities with no room for error. in SMS text messages sent by bank network.” As such, IoT and AI banks. Unfortunately, these can help minimise or SMSs are one of the weakest even eliminate these ways to implement a twopossibilities by safely factor authentication (2FA), accumulating the data because text messages can from various devices, and be intercepted.” then safely storing it while Another worrying trend, he it balances the books.” notes, is the use of scripts on Bethwel Opil, Enterprise Additionally, he says, websites to capture personal Sales Manager at the adoption of machine data in real time as happened Kaspersky Lab Africa. learning will allow with British Airways and businesses to use predictive analytics for Ticketmaster in 2018. “This is truly better planning for the future on the basis alarming, because such methods allow the of clear performance insights. capture of data such as CVV numbers, “IoT has also revolutionised payment which online providers don’t hold on methods,” he continues, allowing consumers their sites.” to make payments with their mobile devices Two huge cases in point: the whether via cell phone banking, internet Ticketmaster hack in June 2018, banking, mobile apps or tap-and-go compromised the personal and payment services, promoting a “true” cashless society. data of up to 40 000 UK clients, according

to a BBC.com report. Three months later, in September 2018, Forbes.com reported on a BA website hack that compromised the personal and financial information (including credit card numbers, expiry dates and CVV codes) of an estimated 80 000 British Airways passengers.

Phishing, keyloggers and banking Trojans According to Mr Opil, cybercriminals often use phishing, keyloggers or banking Trojans to obtain online banking usernames and passwords. They then log in to the online bank and request a money transfer. Most banks would ask for additional confirmation of the transfer and send a code for verification to the account owner, he goes on to say, very often in the form an SMS. The danger, though, is that cybercriminals are becoming more and more accomplished in obtaining one-time passcodes and standard login credentials. Once they have compromised the device used by the bank customer, they modify the content of the browser to ask the customer to confirm their mobile number. Then they use this to send the customer a malicious app that purports to be a security certificate. Once this is

SPECIAL FEATURE: CASH CRIME

ONLINE SAFETY TIPS With the ongoing move to digital by financial institutions, consumers need to follow strict online safety protocols to ensure the safety of their money. In addition to having a trusted security solution in place and installing software updates as soon as they are available, Mr Opil advocates the following tips: • Keep your privacy settings private: Marketers love to know all about you, and so do hackers. Both can learn a lot from your browsing and what you post on your social media networks, so make sure you change your social media network settings to ‘friends only’ or ‘my contacts’. By keeping them as ‘public’, hackers can steal your profile picture and information from

the ‘about you’ section and then create fake accounts. • Practice safe browsing: Just as you wouldn’t walk through a dangerous neighbourhood, don’t visit a dangerous neighbourhood online. Cybercriminals use striking content as bait, knowing that people can be tempted and let their guards down when searching for it. The Internet has a good and a bad side, filled with hard-to-see pitfalls, where one careless click could expose personal data or infect your device with malware.

over its security. Corporate cybersecurity experts worry about ‘endpoints’ - the places where a private network connects to the outside world. Your vulnerable endpoint is your local Internet connection so make sure your device is secure, and when in doubt, wait for a better time ie until you’re able to connect to a secure Wi-Fi network, before providing information such as your bank account number. If you have to use public Wi-Fi for confidential transactions, invest in a VPN (Virtual Private Network).

• Make sure Internet connections are secure: When going online in a public place, for example by using a public Wi-Fi connection, you have no direct control

• Be careful what you download or click on: A top goal of cybercriminals is to trick you into clicking on or downloading malware, which are programmes or apps that

installed, the criminals are able to capture the one-time codes sent by the bank for each transaction. Banks accept the transfer as legitimate because the transaction was authorised twice: once with the client’s password, and then again with the one-time code. “So, the money goes to the criminals,” he says.

Just how safe is the cloud? Mr Opil is cautionary about the cloud. “Remember that data stored in the cloud is accessed from an endpoint within a business, so if cybercriminals are able to compromise the endpoint, they gain access to the data wherever it is stored. The wide use of mobile devices, while offering huge benefits to businesses, also increases the risk. Cloud data can be accessed from devices that may not be as secure as traditional endpoint devices. The combination of personal and business use on the same device increases this risk.” Something else to consider, he adds: “The cloud itself is likely to become a target, and given that a cloud provider holds so much data, a very attractive target!” What’s important to note, he says, is that top security cloud threats shouldn’t be taken in isolation. “They build on each other to enrich an ever-growing landscape of threats facing all types of businesses, be they private, public, small enterprises or

securityfocusafrica.com

carry malware or try to steal information. This malware can be disguised as an app: anything from a popular game to something that checks traffic or the weather. • Passwords and storing data: Attacks on large cloud-based sites have jeopardised the data security of millions of users, so strong passwords are critical. Additionally, don’t store credit card numbers and billing addresses on websites when shopping for things online. If you have trouble remembering all your passwords, consider using a password manager application where you just need to remember one master password, and the password manager does the rest for you.

government. The only consistent reprieve from this onslaught is the sharing and knowledgeable application of high-fidelity threat intelligence.”

After all, if I choose a poor password and it is compromised, I can change it: if my fingerprint is compromised, there’s nothing I can do about it.”

Biometrics:

Mitigating risk

Says Mr Opil: “The increasing number of data breaches, often involving theft of passwords that people use across multiple accounts, has led an increasing number of companies to believe that we should replace passwords altogether. In recent years, for example, Apple has allowed fingerprint authorisation for iTunes purchases and payments using Apple Pay. Samsung has introduced fingerprint, voice and iris recognition for Samsung Pay. Amazon has introduced ‘selfie-pay’ and MasterCard and HSBC have included facial and voice recognition to authorise transactions. “The parts of us that can be used to confirm our identity include face, eyes, ears, fingerprints, veins and heartbeat. Technology translates this into binary data and uses it to confirm a match and thereby verify who we are. It’s clear that the use of biometrics is not a security panacea. Biometric data can be spoofed or stolen. I believe that biometrics should be used to confirm our identity (ie used in place of a username), with a password (or other mechanism – or ideally more than one) used to confirm that identity.

Financial institutions need to use threat intelligence to understand and manage their risks, and they need to invest in adaptive security measures to protect their systems and the data they handle, asserts Mr Opil. This includes being able to detect targeted attacks, protect endpoints including ATMS, and undertake real-time transaction analysis in order to pick up fraud. “It’s vital that banks protect ATMs effectively, installing protection software, allowing only authorised applications to run and ensuring that communication between the hardware units and main application are authenticated.” He adds: “While it remains important for banks to secure their systems and for banking customers to ensure that their devices are well protected, there is also technology available to secure transactions in real time. This includes checking the credentials of customers, including users of biometric and behavioural methods, checking the security of the environment being used for the transaction and looking for signs that might suggest a fraudulent transaction is taking place.”

SECURITY FOCUS AFRICA APRIL 2019

BANKING SECURITY

The traditional and emerging threats

global banking industry By Ingrid Olivier

Moving from a From hodgepodge to symphony “hodgepodge of systems, Referring to technology priorities such as core modernisation, data platforms, software and tools” to management with storing and processing, and AI-powered analytics for effective decisions, the report says the challenge for many a “symphonic enterprise” is one of the banks “is that data, for the most part, is being managed in siloed, key challenges facing banks throughout disparate systems, which complicates their ability to know and the world today. That’s according to the serve their clients.” As banks accelerate their digital transformation efforts Deloitte 2019 Banking and Capital Markets (including the adoption of machine learning, blockchain and Outlook, which believes that excellent data quantum computing), their reliance on “a patchwork of archaic systems can pose significant risk… how well suited are existing management, modern infrastructure, systems to run, grow, and secure a modern digital bank?” it asks. AI (artificial intelligence) and the cloud need to take precedence Cybercrime Cybersecurity is another of the top risks facing financial institutions, in 2019. believes PwC. In its report “Technology 2020 and Beyond: Embracing disruption”, it identifies the leading security threats as third-party vendors,

SECURITY FOCUS AFRICA APRIL 2019

securityfocusafrica.com

BANKING SECURITY

make mobile payments using watches or fitness trackers. “Insurers are using telematics technology to monitor driving habits and provide discounts to safe drivers,” it explains. To this end, “cybersecurity is the leading challenge to the adoption of IoT “Research is technology because insecure interfaces pointing to an increase the risk of unauthorised access,” the group says. PwC’s increase in financial concerns include attack surfaces crime as criminals and perimeter security. The take advantage of former, it explains, involves hackers gaining entry to corporate access to billions of networks through IoT devices, compromised while with perimeter security, because data records.” IoT technology relies on cloud-based services, the danger lies in failing to implement effective perimeter defences.

13 billion records

to the

rapidly evolving sophisticated and complex technologies, cross-border data exchanges, the increased use of mobile technologies by customers (including the rapid growth of the Internet of Things (IoT), and heightened cross-border information. “Expected IoT growth introduces a new set of security risks and challenges that will require serious attention. IoT refers to the proliferation of physical objects (devices, cars, houses, wearables) that contain sensors, software and the ability to communicate. Some industry sources see the number of IoT devices deployed across the world reaching about 25 billion by 2020. “Until now, IoT growth in financial services has primarily occurred in payments, insurance and banking. Banks are forming partnerships with wearable technology manufacturers to allow customers to

securityfocusafrica.com

Barley Laing, UK MD of Melissa Global Intelligence, says in his blog on finextra. com, “Preventing financial crime and delivering seamless customer onboarding - can you accomplish both?” that research is pointing to an increase in financial crime as criminals take advantage of access to billions of compromised data records. “The research we carried out with the AITE Group in 2018 found that 13 billion data records were stolen or lost in the US since 2013, which in turn is driving increased application fraud that’s set to cost banks in the US $2.7 billion in credit card and DDA loses in 2020, up from £2.2 billion in 2018. This is a global issue with the UK fraud prevention service Cifas highlighting that around 175 000 cases of identity fraud have been reported by its members per year over the last couple of years.”

New-age defences Deloitte believes that banks need to embrace what it calls “new-age defences” in order to be able to manage both traditional and emerging risks. This includes using technology such as algorithms and AI for smarter decision-making, provided it incorporates the necessary protection around clients’ data and privacy. The Group also expresses concern over the dangers of increased connectivity with third-party providers, which could drive up cybercrime. As far traditional risks go, Deloitte predicts that personal accountability is going to be a key focus area when it comes to breaches of clients’ personal information. And, it says, “amid rising geopolitical risk, most banks are increasingly concerned that cyberattacks from state actors could be potentially disruptive to the industry.”

Recommending that banks adopt a “threefold, next-generation” cyber risk management approach, Deloitte says these should include: • Going back to basics by strengthening controls such as IT asset management, patch and vulnerability management to spot and control risks as boundaries expand with cloud and open architecture; • Applying analytics and AI at scale, while recognising these technologies can also be used by bad actors – think of smart encryption algorithms and self-morphing/ intelligent malware that can spiral out of control; and • Building a resilient infrastructure to withstand systemic disruption and long periods of stress. The ANZ (Australian and New Zealand) Group made headlines in September 2018 on the back of its implementation of a successful proof-of-concept model. Using secure cloud technology designed to analyse aggregated, de-identified data sets for customer insights, a task previously done manually, ANZ said the cloud-based platform allowed them to provide their bankers with meaningful data insights instantly and process data “250 times faster”.

Proof of life Establishing ‘proof of life’ using biometrics, particularly with interactions between banks and their customers increasingly taking place online, is critical to help avoid fraud, maintains Mr Laing. “It’s possible to efficiently do this by using a service that, for example, monitors eye movement to ensure that you are speaking to a real live person not a photo. Biometrics also help banks to quickly establish a customer’s identity, enabling them to avoid asking time consuming security questions. This ensures customers can access their account faster, and that they have a good experience.”

Only the beginning PwC believes it will be short-sighted of banks to focus solely on compliance with current regulations. Encouraging financial institutions to do their part, it believes that they need to make data and control transparency priorities and develop a better understanding of where their data and associated controls live. “This will let them work with a growing range of interested regulatory bodies more quickly, easily and accurately, on everything from stress tests and periodic exams to individual requests. By doing so,” it maintains, “they will improve their credibility with regulators today and be ready for the future.”

SECURITY FOCUS AFRICA APRIL 2019

CASH-IN-TRANSIT UPDATE

Cash-in-transit attacks

Are they decreasing at last? One of South Africa’s most violent and brazen crime categories, cash-in-transit (CIT) robberies numbered a horrifying 376 incidents – more than one a day – in 2017. By Ingrid Olivier

y the end of 2018, the number of attacks had come down to 292 according to SABRIC (South African Banking Risk Information Centre), still unacceptably high but giving some hope that the “collective tactical” interventions adopted by law enforcement and the country’s cash industry at a special meeting in June 2018 are working. However, warns Richard Phillips, joint CEO of retail cash management specialists Cash Connect, while CIT crime has dropped by 23 percent in the last few months, criminals still have the upper hand. Following the release of Cash Connect’s latest cash crime report on 16 April 2019, Mr Phillips says cash crime is still unacceptably high, driven by continued consumer reliance on in-store cash transactions, the fact that there’s more 18

SECURITY FOCUS AFRICA APRIL 2019

than R140-billion in circulation in South Africa at any given time, and an underperforming police crime intelligence unit. Of serious concern for Dr Johan Burger of the Justice and Violence Prevention Programme at the Institute for Security Studies (ISS) is the reported corruption of the country’s justice system around bankassociated robberies. Research into cash-in-transit gangs has found a high level of complicity by criminal justice officials, he says, adding that it is extremely important to properly investigate allegations of involvement by these officials and to ensure that they are brought to book.

Modus operandi According to SABRIC CEO, Kalyani Pillay, large syndicates of between 10

and 15 members are behind most of the CIT heists in South Africa. Members are usually in possession of stolen and illegal automatic and semi-automatic weapons such as R4, R5 assault rifles and AK 47s as well as commercial explosives. Further, she says, they are able to plan meticulously using insider information. Transport is usually in the form of stolen luxury high-performance vehicles, which they use to stop armoured vehicles and to aid them in their getaways. While she’s encouraged by the measurable decrease in CIT incidents since 2017, which she attributes to both the combined efforts of industry and police, and an increased arrest rate, she says the losses remain immense. These include the deaths and injuries of crew members, vehicles being

securityfocusafrica.com

CASH-IN-TRANSIT UPDATE

damaged beyond repair, and the negative impact on South Africa’s economy and ultimately consumers.

Peak seasons According to Cash Connect, nonresidential cash robberies have shown an increase countrywide over peak seasons such as Easter and December, in contrast with the downward trend for the rest of the year. This, coupled with the changing nature of cash-related crime, needs increased attention and vigilance by law enforcement agencies, says Mr Phillips, whose company has noted a 16 percent increase in retail cash crime over the Easter period for the last two years as reported by the Consumer Goods Council of SA. “Methods have evolved since Easter 1977, when R1 million in cash and

securityfocusafrica.com

jewellery was stolen from Standard Bank in Krugersdorp. With nobody around, the robbers gained entry by burrowing a tunnel under the bank in a crime that remains unsolved. These days cash criminals are far more brazen and a lot less patient, particularly in Gauteng, the so-called gangster province, with its rapid population growth of around 3 000 migrants per month and high unemployment,” he points out. “Robbers who target retail outlets and armoured vehicles are very different today, usually heavily armed, with explosives and who don’t fear being seen.” Also of interest, he adds, is that almost half of all Retail cash robberies take place in Gauteng, followed by the Eastern Cape, Mpumalanga and then KwaZulu-Natal. “In almost every major economy in the world, cash remains the dominant

Automation delivers lower overheads, improved efficiencies and improved cashflow, with an overall reduction in the cost of cash management in store of between 20 and 60 per cent depending on the monthly value of cash receipts. “Despite this, no more than 30 per cent of South African retailers have thus far taken the giant leap of faith from what they know and understand to automation, and electronic deposit services, despite the slamdunk obvious benefits.”

medium of payment and central bank graphs continue to show the year-on-year growth of cash in circulation. These are the indicators of consumer preference and I would suggest that there is a disconnect between financial institutional digitisation and consumer’s trust in cash,” he says. “The question one must ask is why? And the answer lies in the inherent faith that the average consumer places in hard cash. I am convinced that until we can remove the risk of internet banking fraud and related electronic theft from the consumer, the future of electronic financial transactions involving the average consumer will be materially restrained. “Traditional cash handling not only drains business resources through increased overheads, but creates a risk for theft, cash shortages and armed robbery.”

“Owners need to confirm that their CIT service includes insurance cover while the cash is being moved from the business premises to the bank. Unless the customer specifically purchases insurance against any form of loss and for a fee over and above the cash in transit service fee, it is more than likely that no such cover exists,” he cautions. A strong advocate of automation, he says today’s high-tech, intelligently automated cash management processes include instore protection, transit logistics, shrinkage control and online financial administration systems that not only keep business owners on top of their cash receipts on a real time basis but also substantially reduce the risk of armed robbery particularly when robust cash deposit vaults, built to minimum SABS category 4 standards, are used.

The hidden costs of cash and the way forward Business owners with manual cash management processes also face the reality of separate insurance costs, often with excess limits for the cash on the premises as well as while on its way to the bank with the armoured car company, Mr Phillips points out.

SECURITY FOCUS AFRICA APRIL 2019

PERSONALITY XXX PROFILE

In conversation with…

Kalyani Pillay CEO of SABRIC By Ingrid Olivier

“I handed in my resignation at the NPA (National Prosecuting Authority) when its head Vusi Pikoli was unfairly suspended.”

nd that, in a nutshell, encompasses the value system of Kalyani Pillay, who went on to become the CEO of the South African Banking Risk Information Centre (SABRIC) immediately after resigning from the NPA in 2007.

The rewards

Early years Kalyani grew up Pietermaritzburg in KwaZulu-Natal. She enjoyed gymnastics, played basketball at school and spent most of her spare time reading. “My love for baking also began in my teenage years and has grown to be my greatest stress-relieving activity today.” After matriculating from Pietermaritzburg Indian Girls High School, Kalyani went on to study law. After being awarded her BA(Law) at the University of Durban-Westville, she achieve her LLB at the University of Natal (PMB). From 1987 to 1995 she worked for A K Essack, Morgan Naidoo & Co in Pietermaritzburg, first as a candidate attorney and then as an attorney and conveyancer. In 1995 she accepted the position of Head of the State Attorney’s Office in Johannesburg, which she held until 2002. She then went on to work for the Department of Justice before joining the NPA as Special Director of Public Prosecutions in 2005. In 2007, she applied for and was chosen for the position of CEO of SABRIC.

A typical day for Kalyani is hectic and fastpaced but it’s what she calls ‘good busy’. “I suppose that when you enjoy what you do and know that your work is making a difference, then the effort is worth it.” From engaging with the executives of SABRIC’s funders and stakeholders to attending media interviews, interacting with staff and troubleshooting when necessary, hers is a demanding position that comes with many challenges.

“Our ability to assist our bank and cash management company members, and to utilise this collaborative platform to fight organised crime in a non-competitive environment. Our awareness campaigns and consistent communications to the broader public to enlighten them on current and emerging trends, coupled with advice on how to protect themselves from unscrupulous criminals, makes our work meaningful and rewarding.” “We’re also proud of the relationships we’ve developed with all our public and private sector partners, which are essential to be able to deal with the fight against crime more holistically.”

The challenges

Success and proud moments

“Nothing is static. The organised crime landscape constantly changes and so does the need to address the changes effectively. Dependencies and interactions with other institutions and bodies is vital in our work and sometimes has its challenges which require constant attention. We are mindful of this and strategise and plan accordingly.” “One of the key issues for banks today is potential and actual cybersecurity compromises. Banks have moved to digital platforms to make banking more convenient and accessible for their customers, and of course, organised criminal syndicates know this. Their attempts to compromise bank customers, steal their personal and confidential information and ultimately their money not only results in unhappy customers but also reputational damage for the banks, so we are very focused on creating awareness among customers to help empower them and

“There have been many. SABRIC staff often provide expert testimony to support the aggravation of sentence and we are proud when hefty sentences are metered out in those cases. Our support of law enforcement in their investigations and prosecutions has, on many occasions, contributed to successful Hopes and dreams for South convictions.” Africa “Our awareness campaigns, many of which “That we can achieve a stable economic are recognised through awards. One of our environment to enable growth, job awareness campaigns received recognition creation and poverty alleviation. Rooting at the African Excellence Awards out corruption, strengthening and for best PR campaign and upskilling our public sector and “Nothing it also received two ensuring greater collaboration is static. The further accolades at the between all spheres of organised crime Prism Awards.” government and the private landscape constantly “We are also proud sector. The tasks ahead are changes and so does when bank customers huge but they’re definitely the need to address heed the advice provided doable if the best decision the changes and are able to recognise makers and appropriate effectively.” a scam.” resources are in place.”

Total craziness!

in so doing, prevent them from becoming victims of these crimes.”

SECURITY FOCUS AFRICA APRIL 2019

securityfocusafrica.com

PERSONALITY PROFILE

Family “I have three very special and amazing men in my life: my husband whom I’ve been with for more than 37 years, and my two sons. I’m also looking forward to welcoming my daughter-in-law into our family when she and my older son marry later this year.”

PROTECT YOUR MONEY The South African Banking Risk Information Centre (SABRIC), keeps you informed about the latest banking scams and fraudster activity to make sure that you don’t end up as a statistic.

Leisure time “What leisure time? I enjoy eating out and trying out new restaurants with my husband, family and friends. As I also enjoy cooking and baking, we often entertain at home. Traveling either abroad or within the country is also top of my leisure-time agenda and has resulted in some exciting times and adventures. And of course, I try to find time to read in between all of this.”

Books “I’m reading Man’s Search for Meaning by Victor E Frankl, a short but amazing read, recommended by a colleague and one which resonates with me in so many ways, despite the difference in circumstances. Frankl’s story is about his time in a Nazi concentration camp and how he coped and focused his mind during that ordeal. In my current treatment journey for advanced lung cancer, I recognise some similarities in our philosophies and attitude to dealing with a life-threatening situation. He came out alive, and I am alive and well.” “I’m also reading The Ministry of Utmost Happiness by Arundhati Roy whose books I always enjoy.”

Bucket list “I am fortunate to have been able to do many of the things I enjoy and looked forward to doing. While I’m pretty organised in terms of how I do things, I don’t have a bucket list. We consider, consult and then DO as we go along. It has worked for me and I will probably continue this way. Some of the “on the spur of the moment decisions” have been the greatest.”

Something to share “Learning from my current experience and my treatment journey, I would like to offer something to anyone going through this or any other difficult issue: stay calm, work out your options, and choose what you believe is best to deal with it. Then stride out in the direction of doing it. Don’t dilute your attention by worrying about things over which you have no control. Your energy should always be spent on what will take you closer to your goal than away from it.”

securityfocusafrica.com

Associated robberies where criminals follow a victim after a withdrawal at an ATM or from the bank remain rife. We urge bank clients to avoid carrying large amounts of cash and use alternate safer ways to transact. Bank clients are also still falling victim to fraud at ATMs where criminals interfere with them while they are carrying out a transaction, and SABRIC urges bank clients not to accept assistance from anyone, even if they purport to be bank staff. “Criminals are masters at social engineering and know just how to exploit human vulnerabilities to perpetuate crimes, particularly over the festive season where they tend to let their guard down,” says SABRIC CEO Kalyani Pillay. In a scam known as the “Money Bomb”, the criminal drops a roll of paper covered in genuine bank notes near the victim after they have transacted at an ATM. The criminal then approaches the victim and suggests going to a remote location to share the “money”. At the remote location, the victim is robbed of the money they withdrew, often violently.

Digital platforms have also created social engineering opportunities for criminals to manipulate their victims into divulging their personal or confidential information. Clients are still compromised because of phishing, vishing or the installation of malware onto a victim’s device by having them click on a link, enabling the criminal to steal sufficient personal information to access their online banking profile. SABRIC urges consumers not to click on links or icons in unsolicited emails or SMSs. SABRIC has also seen an increase in the hacking of social media profiles, where a victim’s social media account is hijacked by hacking their account, or by creating a duplicate account using stolen personal information. The criminal then accesses the victims contacts, and posing as the victim, fabricates a tragic story, and sends a message to their contacts requesting money. The victims contacts then unknowingly transfer money to the criminal. “We continue to stress that as a bank client, you are your money’s best protection, so take cognisance of our tips and empower yourself.” says Ms Pillay.

SECURITY FOCUS AFRICA APRIL 2019

COMPANY NEWS

oneM2M named Top IoT Standards Body of the Year Recognising its ongoing efforts to accelerate mass adoption of the Internet of Things (IoT) through standardisation, oneM2M – the global standards body for IoT – has been awarded the Top IoT Standards Body of the Year at the seventh Annual Compass Intelligence Awards.

oted on by more than 40 industryleading press, editors, journalists, and thought leaders, the awards celebrate the outstanding contributions and latest innovations made in the rapidly growing tech market, including Mobile & Wireless, IoT and Emerging Tech. As part of the IoT section, oneM2M was selected as the top recognised IoT organisation focused on IoT standards, specification development and testing. The accolade comes following the launch of its latest set of specifications in late 2018, Release 3, which represent the first IoT service layer to interwork with 3GPP core network IoT features, creating new application and revenue opportunities

SECURITY FOCUS AFRICA APRIL 2019

in industrial, smart-home and mobile segments. Other winners named in the awards include tech giants and industry leaders Apple, CenturyLink, Qualcomm, Siemens, Verizon Wireless and more. “It is an honour to be named Top IoT Standards Body of the Year, particularly in a scheme which invites voting as this highlights the important role the industry sees oneM2M as playing in the IoT sphere,” said Enrico Scarrone, Steering Committee Chair at oneM2M. “I am confident that the dedication and commitment of our members to standardise the IoT will continue as we look to unlock the full potential of the IoT ecosystem, and the opportunities it can bring for a range of

verticals. In doing this, standards are critical to enabling the mass IoT market where everything just works and works together.” oneM2M’s common service layer can be embedded within hardware and software to create a common language between IoT devices, enabling vertical interoperability, best-in-class security and interworking with legacy IoT standards. oneM2M’s vast membership, which is made up of global operators, vendors, consumer electronic manufacturers and regulatory bodies, are working to ensure the standard is adopted globally to accelerate the mass IoT market, as well as IoT focused verticals such as smart cities, Industry 4.0, connected vehicles, the smart home and more.

securityfocusafrica.com

COMPANY NEWS

Sparks sparks a new business Sparks & Ellis, one of SA’s leading uniform suppliers and manufacturers, has helped to build and grow a small business through its corporate social investment (CSI) programme. Natalie Michael, an ex-employee of K-Way Manufacturers, the factory that produces Sparks & Ellis uniforms, tells us her story.

atalie joined K-Way at the tender age of 16, where she worked her way up from a machinist to a line supervisor, and learnt to make a wide variety of uniform items. After 20 years with K-Way, Natalie left and moved to Pretoria to start a family. When she returned to Cape Town in 2016, she bought two sewing machines and decided to approach Sparks & Ellis for work opportunities. Knowing of her hard work and dedication, Sparks & Ellis did not hesitate to contract Natalie to make up some of their uniforms on a cut, make and trim (CMT) basis. As Natalie’s workload increased, Sparks & Ellis then helped her by buying four additional sewing machines, a laptop computer, a printer and a delivery vehicle.

securityfocusafrica.com

Along with mentoring from Sparks & Ellis management, and with the introduction of some new IT technology, Natalie is also now able to produce her own electronic invoices and statements in order to keep all her accounts in order. Sparks & Ellis director, David Gaussen, says: “We take very seriously our commitment to helping to uplift SMMEs (small, medium and micro enterprises) to build a sustainable business that will, in turn, benefit their families, employees and their communities. Our company also benefits as the process ensures that we have good, flexible and loyal suppliers who become partners in our business. It’s a winwin for everyone.” In the past few months, Natalie has increased her complement of staff from

eight to 10 machinists who are all now permanently employed, most of whom are Natalie’s ex-colleagues, friends or family. Natalie says: “We learnt so much from our experience at K-Way, and are thankful for the knowledge and skill we gained. This makes it possible for us to produce quality items and run a very successful operation.” With 17 machines and one delivery vehicle, Natalie’s small factory is able to complete orders timeously and of good quality. Sparks & Ellis supplies all the fabric for the garments and Natalie and her staff make sure that they get the orders done within the given time frame. “We mostly produce ladies’ skirts, trousers and jackets. The biggest order placed to date was for 430 cleaners’ suits, which we completed on time and without any returns. So we are very proud of our achievement, and we are very grateful to Sparks & Ellis for their help in getting us started and for the continued business.”

SECURITY FOCUS AFRICA APRIL 2019

COMPANY NEWS

Paxton’s global training reaches more installers than ever before

Paxton has trained more than 2 000 installers across the world already this year, meaning a record first quarter - and enabling more people than ever to use Paxton products.

his means the company is well on the way to meeting its ambitious target of training 10 000 installers in 2019, which would represent a 14 per cent increase from 2018 – itself a record year, which saw 5 000 installers trained in Europe alone. Global Training Manager Steve Woodbridge said: “We’re excited that record numbers of installers worldwide are now able to fit Paxton products to high standards. Training really allows installers to get to know Paxton’s systems and keep up to date with our latest product releases, which benefits both the installers and us. “We know that 9 out of 10 trained installers go on to regularly install Paxton

products*. This validates our belief that trained installers are confident fitting Paxton products and will choose them again and again for their customers. We can also be confident our products are being fitted to high standards which is key to an end-user’s experience.” Paxton has been offering free installer training since 2005. Workshops are held at Paxton offices, as well as out in the field. With new products released regularly, the programme is constantly evolving. Steve said: “We have ambitions to expand our international footprint even further, which is why we’re striving to achieve the 10 000 installers trained milestone this year. We’re encouraged by such a strong

first quarter and would like to thank those installers who’ve joined us so far.”

Recent feedback includes: • “Fun, exciting and presented very well” • “Best training in 10 years in the industry” • “Good insight into the software and how flexible the system is” • “Excellent training. Very hands-on, brilliant course”. To register for a free training workshop: Paxton.info/4035 * 1068 customers were surveyed by Paxton in 2018, as part of an extensive customer research project.

TRAINING IN NUMBERS – 2018 HIGHLIGHTS • In the UK, more than 4 200 installers from almost 2 000 companies had training in 2018 - that’s a 10% increase on 2017. • It was the second year Paxton had a dedicated US training team, resulting in 3 300 more dealers being trained – an increase of 62%. • In South Africa, 390 installers were trained from 214 companies. • Paxton’s Benelux team exceeded expectations by training more than 500 installers during two tours across nine locations and at weekly inhouse workshops at our offices in Breda, Holland. • 122 installers from 82 companies were trained in France – and even more training dates have been added here for 2019. • 91 installers from 37 companies were trained in Germany.

SECURITY FOCUS AFRICA APRIL 2019

securityfocusafrica.com

NATIONAL CERTIFICATE IN

GENERAL SECURITY PRACTICES NQF LEVEL 3 SAQA ID 58577 SPECIALIST SECURITY PRACTICES NQF LEVEL 4 SAQA ID 57713

TRAINING COURSES • Administration of Training and Development • OHSAct – Assigned Persons • Advanced Management

• OHS Act Health and Safety Representative

• Advanced Motoring

• Performance Management

• Armed Robbery Survival Skills

• Practical Skills in Self Defence

• Basic Investigation

• Public Relations

• Basic Management

• Retail Loss Prevention

• Business Fundamentals

• Risk Management

• Campus/School Security

• Security – A Basic Need

• CCTV Management

• Security – A Total Concept

• Credit Card Fraud

• Shopping Centre Security

• Drug Abuse and Dependency

• Skills Programmes

• Emergency Planning and Evacuation • Enhancement Programme • Fire Technology • Fraud Investigation • Hijack Survival Skills • Home Personal Safety Programme • Human Investigation Management • Internal Customer Service • Loss Control/Security Managers/ Loss Control/Guards

• Supervision of Personnel • Understanding and Dealing with People

SKILLS PROGRAMMES • Patrol Officer • Access Control Officer • Asset Protection Officer • First Line Security Supervisor • Security Supervisor

Office 3, Promenade Centre, 40 Voortrekker Road, Alberton PO Box 136843, Alberton North, 1456 Tel: 011 869 1946 | Fax: 086 606 7489 | errol@btctraining.co.za

www.btcafrica.co.za

EXHIBITION NEWS

SIA announces winners of the

2019 SIA New Product Showcase Awards The Security Industry Association (SIA) has announced the 2019 winners of the SIA New Product Showcase Awards, the flagship awards program at ISC West recognising innovative security products, services and solutions.

op among the winners – who were recognised on the main stage at ISC West, the nation's largest converged security trade show, on April 10 in Las Vegas, Nevada – was IPVideo Corporation, receiving the 2019 Best New Product Award. Since its inception in 1979, the SIA New Product Showcase has been the security industry's premier awards-based marketing program. In 2019, the 30 judges reviewed over 95 entries from more than 80 companies, presenting awards for technologies

SECURITY FOCUS AFRICA APRIL 2019

covering more than 30 product and service categories. IPVideo Corporation received the Best New Product honor for its HALO IOT Smart Sensor, submitted in the Environmental Monitoring Systems category. "A security device for privacy areas, HALO IOT Smart Sensor was introduced to help schools combat the vaping epidemic, bullying and active shooter threats. The addition of environmental sensors including air quality, advanced smoke detection, carbon monoxide, carbon dioxide and audio analytics such as glass break, gun shot and aggression detection, HALO has now expanded across verticals. Facilities can now secure privacy concern areas including bathrooms, locker rooms, hotels, patient and dorm rooms and signal alerts to security," said IPVideo, which can be found on the ISC West show floor at booth 20001. "SIA's New Product Showcase calls security companies to develop extraordinary, innovative products and solutions, and this year's winners represent the best new offerings in the market," said SIA CEO Don Erickson.

"SIA congratulates all the companies who received awards in 2019, particularly IPVideo's HALO IOT Smart Sensor for standing out among the entries in this highly competitive program to earn the Best New Product distinction." The prestigious Judges' Choice Award was presented to Alcatraz AI for the Alcatraz AI product, submitted in the Access Control Devices & Peripherals category. Alcatraz helps customers "replace badging as an access point identification method by leveraging facial recognition, 3D sensing and artificial intelligence to enable highly secure and frictionless entry into physical locations." At ISC West, Alcatraz AI is located at booth 17121. Additionally, Axis Communications received the New Product Showcase Merit Award, which recognises an individual or company who, through their support of the New Product Showcase, demonstrates a commitment to the vision and mission of the program, contributes to its success and promotes the advancement of SIA and the security industry overall. Axis can be found at ISC West Booth 14051.

securityfocusafrica.com

EXHIBITION NEWS

THE 2019 SIA NEW PRODUCT SHOWCASE WINNERS ARE: Best New Product Award • Winner – IPVideo Corporation: HALO IOT Smart Sensor.

Communications Solutions • Winner – Honeywell: BiDirectional Amplifier/ERCES.

Judges' Choice Award • Winner – Alcatraz AI: Alcatraz AI.

Convergence and Integrated Software and Solutions • Winner – Johnson Controls: Tyco Visual Intelligence. • Honorable Mention – PnewSoft, LLC: fireNspec.

New Product Showcase Merit Award • Winner – Axis Communications. Category Awards Access Control Devices & Peripherals • Winner – Adams Rite: G100 Digital Glass Door Lock. Access Control Devices & Peripherals Wireless • Winner – Nexkey, Inc.: Nexkey Core. Access Control Software & Controllers • Winner – ReconaSense: ReconAccess. Anti-Terrorism/Force Prevention • Winner – IPVideo Corporation: ViewScan. • Honorable Mention – Ameristar Perimeter Security: Stalwart Optima.

Cybersecurity • Winner – Razberi Technologies: Razberi EndpointDefender. • Honorable Mention – Gallagher: Gallagher Security Health Check.

Lock Systems and Secure Storage Containers • Winner – Securitech Group, Inc.: SAFEBOLT. Mobile Apps • Winner – Nirovision: Niro Aware. Network Support Solutions • Winner – Southco, Inc.: Modular H3-EM Electromechanical Swing Handle.

Design, Diagnostic and Installation Tools • Winner – AEM: TestPro CV100 Multifunction Cable Tester.

Outdoor Perimeter Protection • Winner – FLIR Systems Inc.: FLIR Saros DH-390 Dome Camera.

Emergency Communication Systems • Winner – Neosen Energy: SafeKard.

Residential and Monitoring Solutions • Winner – Alula: BAT-Connect Communicator.

Environmental Monitoring Systems • Winner – IPVideo Corporation: HALO IOT Smart Sensor (Best New Product Winner)

Threat/Risk Management Systems • Winner – Athena Security: Athena A.I. Threat Detection & Safety Platform.

Cloud Solutions • Winner – Arcules: Arcules Integrated Video Cloud Service.

Fire/Life Safety • Winner – DITEK Surge Protection: 120VAC Smart Surge Protector With RapidReplacement Module.

Commercial Monitoring Solutions • Winner – CHeKT: CHeKT Bridge.

Hosted Solutions/Managed Services • Winner – Viakoo: Video Assurance Service.

securityfocusafrica.com

Intrusion Detection and Prevention Solutions • Winner – HSI Sensing: Sentinel Retro – PRX+12215.

Unmanned • Winner – Cobalt Robotics: Cobalt Robot With Door Integration. User Authentication, Identification, Credentialing and Management • Winner – HID Global: iCLASS SE RG25F Fingerprint Reader/ Controller.

• Honorable Mention – CrucialTrak Inc.: BACS Fleet Glance. Video Analytics • Winner – Vintra: FulcrumAI. • Honorable Mention – ZeroEyes: ZeroEyes. Video Surveillance Cameras HD (Megapixel) • Winner – Hanwha Techwin: PNM-9000VQ. • Honorable Mention – Bosch Security and Safety Systems: FLEXIDOME IP starlight 8000i. Video Surveillance Cameras IP • Winner – Speco Technologies: Ultra Intensifier. Video Surveillance Data Storage • Winner – ProActive Data Storage and Monitoring & IronYun: ProActive AI Powered by IronYun. Video Surveillance Hardware and Accessories • Winner – Dotworkz Systems: STXL Long-Lens Camera Enclosure. Video Surveillance Management Systems • Winner – Milestone Systems: XProtect Corporate 2019 R1. Video Surveillance Mobile Solutions • Winner – Vosker: V-200 Solar Cellular Camera.

SECURITY FOCUS AFRICA APRIL 2019

ON THE MARKET

Keeping the lines of communication open for improved security An intruder detection and alarm system is a great defence mechanism for homeowners and businesses alike. But if the alarm cannot communicate effectively, then it is merely a collection of boxes housing unused technology.

ermaconn has several products that enhance control room communication. The Permaconn solution entails high-end radios located in secure premises, connecting back to the secure signalling using single-sim, dual-sim or ethernet/fibre networks.

High speed communication software platforms Permaconn’s communication solutions provide a private and secure network (encrypted to AES128), which ensures alarm signals are securely delivered from the protected premises to the control room. These options include: • Atlas – a secure platform for remote management of Permaconn communicators and all aspects of account administration. • PCS – a remote access tool that allows real-time programming of a broad range of third-party alarm systems.

• Pocket Secure – a smartphone app that enables consumers and business owners to remotely control their alarm systems from anywhere in the world.

DID YOU KNOW?

There were 227 727 reported incidents of house burglaries and 71 131 burglaries at nonresidential premises in 2018.

Why Permaconn? • Permaconn radios connect to the cloud network using single-sim, dual-sim or ethernet/fibre networks, enabling a triple pathway of communication back to base. • High security levels for peace of mind. • Constant triple-path connection with realtime supervision of all network links back to Permaconn radios and bases. • Can connect all alarm panels to control rooms in SA. • Technology works over either IP networks, mobile networks or both. • All Permaconn radios have three inputs. and three outputs and a serial interface

• Plug-and-play easy installation.

Financial benefits

There are a number of benefits that make the Permaconn solution easy on the pocket: • SMS cost savings benefit to security companies - uses push notifications on data network. • Can charge separately for each Pocket Secure Plus user per household. • Pocket Secure app can be labeled with your own company branding and marketing. • Standalone option available on our Sureconnect platform – customers without control rooms can utilise the system and monitor their customers. • System includes 1 hour and 2 minute radio polling.

Hikvision launches AcuSense network cameras Hikvision has introduced new AcuSense network camera series to its EasyIP 4.0 security solutions.

eaturing a strobe light and an audio alarm, the new cameras can immediately deter intruders from entering a prohibited site, further enhancing the safety of premises. Hikvision AcuSense network cameras build on the same cutting-edge intrusion detection functionality found within the existing Hikvision EasyIP 4.0 security solutions. When a potential threat is detected by the camera, it uses its intelligent false alarm

SECURITY FOCUS AFRICA APRIL 2019

reduction technology to disregard irrelevant movements, such as rain, leaves and animals. Instead, the camera focuses on human or vehicle movement, dramatically reducing the number of false alarms for faster, more accurate intrusion detection. Once a potential intruder has been accurately detected, the AcuSense network camera triggers the built-in strobe light and audio alarm. This is designed to warn the intruder off before they attempt to breach the perimeter. The volume of the audio alarm and the brightness of the strobe light can be adjusted to suit the environment. The AcuSense network camera range can deliver this powerful intrusion detection and prevention at all times of day or night.

Powered by Hikvision DarkFighter technology, all cameras in the range deliver superior surveillance images, even in ultra-low light. The new AcuSense network cameras are available in bullet and turret styles, and in 2MP or 4MP resolution, making a total of four different camera options available. Frank Zhang, General Manager of International Product Marketing Department at Hikvision says, “AcuSense technology is already cutting-edge. By adding the strobe light and the alarm, we can now give our customers the chance to prevent incidents from happening in the first place, for even better security. We’re delighted to be able to help our customers protect their property in ever more valuable ways.”

securityfocusafrica.com

ON THE MARKET

Field management from MATRIX COSEC In today’s working environments across the globe, it is important to have talented and skilled employees in various locations. MATRIX COSEC’s Field Visit Management software can assist your organisation to significantly improve field operations, assist in managing and analysing your team deployed in the field as a key task.

o matter which industry, logistics, hospitality, construction or retail, it is essential to have effective communication with your employees to keep morale up and to keep informed of your field employee’s daily tasks and goals. With older traditional systems, it becomes quite a daunting task to manage remote employees. MATRIX COSEC FVM is a comprehensive web-based field employees’ portal. It includes and involves management of these employees’ activities and tasks under various field schedules. And provides live tracking of field employees via reports

with real-time notifications and exceptions. Moreover, it shows status of completed, not completed, ongoing and future tasks.

Benefits for using MATRIX COSEC’s Field Visit Management include the following: • It replaces manual management of field workers with an automatic solution. • Real-time monitoring of time & attendance. • Saves time. • Better planning and managing of field employees. • Accurate and quick salary payments.

Intrusion detection with visual verification technology

Secutel Technologies’ Visual Verifier is the most effective intrusion system available in the market today.

he Visual Verifier (VV) forms the core of Secutel Technologies’ overall solutions and offerings. From concept, design, manufacturing and capabilities, the Visual Verifier (VV) from Secutel Technologies is proudly 100% South African. Secutel

securityfocusafrica.com

Technologies designed the system, specifically to accommodate for low bandwidth availability, poor lighting conditions and low power usage in mind. In areas where high-value losses or physical attacks can occur, the VV is not only a normal intruder detection system but has the added benefit of allowing the control room operators to visually see and verify the situation in real-time; enabling them to make the appropriate decision on how to best handle any given situation. Our modular wired intrusion detection system has ground breaking versatile image capturing capabilities – all cameras have a built-in flash for dark areas or night time image capturing. The photos are of high quality, in full colour (day or night images), compressed and encrypted for quick and secure transmission to the Cloud. The Cloud storage also ensures that access to the information is not limited to onsite storage only.

IP communications over ethernet with backup dual SIMS offering auto failover and selection of the best available signal, remote configuration, testing and management of all components and network, the principle of “always on” enables 24/7 monitoring of the complete system, a wired solution with push technology (no polling), tamper detection, cell jamming detection, battery back-up for up to 72 hours, every event is date and time stamped – are remarkable benefits of having Secutel Technologies’ Visual Verifier as part of your intruder detection solution. Our clients include the largest security companies, banks, CIT operators, retailers and parastatals. With unequalled success rate to date, Secutel’s solution has proved itself to be a leader in the intrusion detection technology field. Let us help you empower your control room operators to make better decisions around alarms and responses.

SECURITY FOCUS AFRICA APRIL 2019

ON THE MARKET

Face to face with Suprema FaceLite at Securex SA 2019

Suprema is excited to announce the launch of FaceLite, Suprema’s new generation compact face recognition terminal featuring the world’s best performing facial recognition technology and sleek design at Securex SA 2019.

aceLite is designed for both enterprise access control systems and time attendance applications by featuring Suprema’s industryleading technologies and innovative features. Loaded with a powerful 1.2 GHz CPU and a massive 8GB of memory, FaceLite achieves incredible matching speeds of up to 3 000 matches per second, support 1:3 000 in identification mode and accommodates up to 30 000 users in verification mode (User ID/ Card/Mobile credential). It features an intuitive face-enrollment GUI for faster user registration and also incorporates built-in counter measures to detect fake face threats, thereby out performing other visual face recognition technologies that are flooding the market and which pose huge security risks. On the optical side, the new face recognition technology overcomes possible interference from dynamic lighting conditions including

SECURITY FOCUS AFRICA APRIL 2019

sunlight and ambient light. The new technology allows for a greater range of operating illuminance from zero lux to 25 000 lux which covers almost every possible lighting condition regardless whether indoor or outdoor (under cover), day or night. While providing the uncompromised face-matching performance of FaceStation 2, the company’s flagship face recognition terminal, FaceLite comes in a compact structure to provide extra flexibility in installation. For RF card support, FaceLite features dual-frequency, multi-card reading technology. The device supports both 125 kHz and 13.56 MHz frequencies and reads most types of RFID card standards with a single device including MIFARE, DESFire, FeliCa and EM. To meet the popular demand for mobile credentials (smartphone authentication) FaceLite also supports both BLE and NFC technologies.

“FaceLite well reflects Suprema’s commitment to technology leadership and market focus. There are growing demands for contactless biometrics which provides enhanced user convenience and hygiene while maintaining a higher level of security, said Hanchul Kim, Director of Global Business at Suprema. “Our new generation facial recognition technology far outpaces all current competitors in terms of matching speed and accuracy and, moreover, our technology offers greater practicality and robustness by offering increased operating illuminance, height range and user capacity,” Kim added. Be sure not to miss FaceLite at Securex SA where Suprema will be showcasing their extensive range of biometric access control systems, time & attendance devices, fingerprint/live scanners and embedded fingerprint modules. Visit us in Hall 2, Stand A0-2b.

securityfocusafrica.com

INDUSTRY OPINION

ISO 20000 and easier

information security compliance By Edward Carbutt, Executive Director at Marval Africa

The looming Protection of Personal Information (PoPI) Act in South Africa and the introduction of the General Data Protection Regulation (GDPR) in the European Union (EU) have brought information security to the fore for many organisations.

his in addition to the ISO 27001 standard that needs to be adhered to in order to assist the protection of information has caused organisations to scramble and ensure their information security measures are in line with regulatory requirements. However, few businesses know or realise that if they are already ISO 20000 certified and follow Information Technology Infrastructure Library’s (ITIL) best practices they are effectively positioning themselves with other regulatory standards such as ISO 27001. In doing so, organisations are able to decrease the effort and time taken to adhere to the policies of this security standard.

ISO 20000, ITSM and ITIL – Where does ISO 27001 fit in?

The link to information security compliance

ISO 20000 is the international standard for IT service management (ITSM) and reflects a business’s ability to adhere to best practice guidelines contained within the ITIL frameworks. ISO 20000 is process-based, it tackles many of the same topics as ISO 27001, such as incident management, problem management, change control and risk management. It’s therefore clear that if security forms part of ITSM’s outcomes, it should already be taken care of… So, why aren’t more businesses looking towards ISO 20000 to assist them in becoming ISO 27001 compliant?

Information security management is a process that runs across the ITIL service life cycle interacting with all other processes in the framework. It is one of the key aspects of the ‘warranty of the service’, managed within the Service Level Agreement (SLA). The focus is ensuring that the quality of services produces the desired business value.

So, how are these standards different? Even though ISO 20000 and ISO 27001 have many similarities and elements in common, there are still many differences. Organisations should take cognisance that ISO 20000 considers risk as one of the building elements of ITSM, but the standard is still service-based. Conversely, ISO 27001 is completely risk management-based and has risk management at its foundation whereas ISO 20000 encompasses much more.

Why ISO 20000? Organisations should ask themselves how they will derive value from ISO 20000. In Short, the ISO 20000 certification gives ITIL ‘teeth’. ITIL is not prescriptive, it is difficult to maintain momentum without adequate governance controls, however - ISO 20000 is. ITIL does not insist on continual service improvement - ISO 20000 does. In addition, ITIL does not insist on evidence to prove quality and progress - ISO 20000 does. ITIL is not being demanded by business - governance controls, auditability & agility are. This certification verifies an organisation’s ability to deliver ITSM within ITIL standards. Ensuring ISO 20000 compliance provides peace of mind and shortens the journey to achieving other certifications, such as ISO 27001 compliance.

securityfocusafrica.com

SECURITY FOCUS AFRICA APRIL 2019

INTERNATIONAL NEWS

InfiNet Wireless solutions deployed to create digital oilfield Digital Oilfield project digitalises Kazakhstan site to automate data management and reduce illegal oil turnover.

nfiNet Wireless, the global leader in fixed broadband wireless connectivity, has successfully delivered a wireless infrastructure solution at a major Kazakhstani oilfield to provide real-time control and accounting of oil production, marking a major step in the transition to a digital oilfield future. InfiNet Wireless and JSC Karazhanbasmunai, one of Kazakhstan’s major oil producers, have successfully collaborated to provide the solution at the Karazhanbas oil field located in Mangistau region. With telecommunications company KRIS-Service, responsible for the development and implementation of a system of facility remote monitoring

(SFRM), the solution was designed to automate oil production processes and reduce illegal oil turnover. The infrastructure allows for the transmission of real-time data on the volume of oil produced, the number of different impurities, the condition of the equipment and other parameters of the automated system from the intelligent control stations (ICS) installed at each well. In total, 114 existing wells and 100 new wells were equipped with InfiNet devices, from which data was transmitted online to the operator's console to enable full control of the oil production process. Based on the results of the experimental tests, InfiNet devices were selected as

the sole wireless equipment to provide complete coverage for the Karazhanbas field area. In total, the project includes a planned upgrade of 370 wells and installation of new ICS for 2,500 wells. “Our ability to operate in some of the most challenging and severe climatic conditions played a key part in us being selected for this,” said Roman Smirnov, Commercial director at InfiNet Wireless. “We have provided a reliable, highly functional and high network throughput service for the oil site and in doing this we have successfully demonstrated the versatility of our services and shown how we are at the forefront of technological advancements in so many sectors.”

Digital Oilfield project in Mangistau, Kazakhstan.

SECURITY FOCUS AFRICA APRIL 2019

securityfocusafrica.com

LAW & SECURITY

Service level protests

By Peter Bagshawe

The sixth election in the series commencing with the 1994 election of Nelson Mandela will take place on 8 May 2019. The run-up to the election has been notable for the level of civil protest that taken place.

s was the case in the run up to the municipal elections that were held in the latter part of 2018 the spike in the number of service delivery protests is noticeable but what is of more interest is the geographical shift that has been demonstrated. The interplay and debate between the political party protagonists has been robust, and the mechanisms of political campaigning have been brought to the fore in their interactions within political camps. Interaction between the parties and the Electoral Commission has been prominent, protests have been lodged and electioneering has been widespread and down to a grassroots level. The approach of the parties has been populist from their respective stances and a number of promises of the way forward have been made. In the process, engagement with communities is inevitable and the communities have, in part, taken the opportunity of bringing their concerns and demands to the fore. In a number of instances, the community demands have involved protest and violence. Before proceeding further it is probably as well to note that accusations have been made of protests being organised, and more specifically being organised to the advantage of political organisations. As a general statement, I consider that there must be an element of organisation on the part of the communities, and the

securityfocusafrica.com

level of organisation, although variable, is evidence of the level of grievance and community commitment. The involvement of political parties in the organisation of protests is a debate for other pundits. The actions of elements of the Alexandra Township community have probably achieved the most prominence with the rolling action that was publicised under the #AlexShutDown, but was not alone from the perspective that #KhayelitshaShutdown and #TshwaneShutDown were also prominent in their respective areas and publically. These protests seem to have served as a template for protests that took place in areas as diverse as Bekkersdal, Orange Grove, Lenasia, Rust Ter Vaal, Steynsrus, Gomorrah township, Coligny, Maboloka, the N2 highway between Somerset West and Cape Town, Litha Park, Nelson Mandela Bay, Motherwell, Steynsburg and Lady Grey. The geographic spread represented is vast in the area that it covers but the core demands remained constant being directed at deficiencies in service delivery. The context of the demands made or serving as the basis of protests is varied depending on the area involved and the community background. Alexandra was established in 1912 and has seen a vast expansion and transition between the early formal housing to the influx of informal shack dwellers, the start of the East Bank area, the failed Urban Renewal Plan,

the problematic Alexandra Renewal Project, clashes between the more formal residents and shack dwellers and xenophobic attacks. Here service delivery including water reticulation, electrification, transport, sanitation, effluent overflows and seepage and formal housing were the main focus. In contrast, the protests in Gomorrah were centred on the provision of land and bulk services while the protests in Rust Ter Vaal arose out of land clearance by the Red Ants and the highway closure between Somerset West Main and the N2 in the area of Broadlands Road came out of a land grab. Land grabs have also featured in the Lenasia area again with involvement of the Red Ants. The effectiveness of protest action by the communities has escalated from the point of contact with instances such as the State President visiting Alexandra to address the protestersâ&#x20AC;&#x2122; concerns being an example, as well as the interplay between President Ramaposa and the Mayor of Johannesburg Herman Mashaba in Alexandra being a counterpoint. As a further example, in the instance of Finetown, the presence of Mayor Mashaba was again called for to meet with the community and address issues relating to demands for full provision of toilets and electrification, and the removal of trees from the informal settlement. The closure of roads in Orange Grove, Broadlands Road and the Daspoort Tunnel linking Pretoria West, Haarte-

beespoort and the Pretoria Central Business District is an example of maximising publicity and awareness that is increasingly being used in protests. The same can be said of the closure of the N12 in the vicinity of Lenasia at the start of the Easter weekend. The distribution of protests and the shift in their location was previously referred to. Historically, there has been a spike in the number of lack of service delivery, and more specifically municipal service delivery, protests around the time of both municipal and national elections. The logic behind this is a combination of increased exposure of the communities (being the electorate) to the political drive at the time prior to elections, as well as the increased exposure that protest action would receive in the various media given the media following the election campaigns underway at thatÂ time. The data flowing out of the 2018 municipal elections is the most complete available at this time and will be used to draw on from the perspective of the current election process. As a starting point, the two provinces that have had the highest influx of people from rural areas and foreign citizens into their boundary areas over the post-1994 period have been the Western Cape and Gauteng. Both have large informal settlement areas with low levels of service, or ineffective services being provided or available in some of the more established

SECURITY FOCUS AFRICA APRIL 2019

LAW & SECURITY

settlements as well as the proliferation of smaller settlements that have, over a period of time, expanded without services being available. The availability of land and the ownership of land that has been appropriated for these settlements is a further issue but will not be debated here. Historically, it is not surprising that Johannesburg, Cape Town and Tswane have registered the highest number of protests over many years. The most recent statistics coming from the municipal election show that there was a shift from the Western Cape and Gauteng to the majority of protests being in the Eastern Cape and currently there have been a number of protests in that area as well as within the historical centres.

The Eastern Cape is a marginal area economically and has a high demographic of migration for economic opportunities to more economically active opportunities. The reason for the spike is not as yet explained but answers postulated include that the Western Cape and Gauteng have in part responded to grievances raised as well as that the situation in the Eastern Cape has become more strained and this has led to rising levels of frustration and protest. The core problems will remain and the level of response required will, on an ongoing basis, require that the SAPS and Metros involved will need to deploy resources to the areas involved. What has not been focused on is the exposure of

INDEX OF ADVERTISERS & CONTRIBUTORS

the public in the areas affected and may increasingly be affected and the primary mitigation available to the public are the private companies that provide them security services. Looking at this from the reverse stance, the primary services supplied by a security provider are wide of securing civilian property against civil unrest, but increasingly I see the possibility that there will be a call for these services to be provided in an urban and peri-urban environment. PETER BAGSHAWE holds a Bachelor of Law degree from the former University of Rhodesia and a Bachelor of Laws degree from the University of the Witwatersrand.

April 2019

PAGE

WEBSITE

Active Track BTC Training Halo Technologies Hikvision IDEMIA InfiNet Wireless Leppard Underwriting Marval Africa oneM2M Paxton Permaconn Plaslope Securex Security Association of South Africa Secutel Sentinel Guard Monitoring Sparks & Ellis Suprema

5 25 OFC, 6-7 28 11 36 14 35 22 1, 24 28 39 OBC IBC 29 9 22 30-34

info@activetrack.co.za errol@btctraining.co.za haloptt@halotechnology.co.za overseasbusiness@hikvision.com micheala.williams@idemia.com SalesAfrica@infinetwireless.com kerry@leppard.co.za information@marvalsa.net oneM2M_Secretariat@list.onem2m.org support@paxtonaccess.co.za mail@permaconn.com glenda.aereboe@plaslope.com leighm@specialised.com admin@sasecurity.co.za corlia@secutel.co.za sales@guardreports.co.za info@sparks.co.za enquiry@suprema.co.za

www.activetrack.co.za www.btcafrica.co.za www.halotechnology.co.za www.hikvision.com www.idemia.com www.infinetwireless.com www.leppard.co.za www.marvalsa.net www.onem2m.org www.paxtonaccess.co.za www.permaconn.com www.plaslope.com www.securex.co.za www.sasecurity.co.za www.secutel.co.za www.guardreports.co.za www.sparks.co.za www.suprema.co.za

SUBSCRIBE HERE

ADVERTISER

Contact Publications (Pty) Ltd, PO Box 414, Kloof, 3640 Tel: (031) 764 6977 Fax: 086 762 1867 Email: jackie@contactpub.co.za  Yes, please, I would like to subscribe to Security Focus Africa at R650 per year (RSA only). The subscription includes an annual Buyer’s Guide.  Enclosed please find cheque to the amount of R  Please start my subscription from the Do you require a tax invoice  Yes

issue.

 No

(If yes, one will be sent to you on receipt of your payment.)

BANKING DETAILS: First National Bank Branch: Kloof Branch Code: 221526 Account No: 50730106925 Name: Contact Publications (Pty) Ltd

NB: Please make cheques payable to Contact Publications (Pty) Ltd Name ................................................................................................ Signature ............................................................................................... Date ...................................................... Company .................................................. Position ........................................................................ Address ........................................................................................................................................................................ Code ............................. Tel .......................................................... Fax .............................................................. Email .............................................................................

SECURITY FOCUS AFRICA APRIL 2019

securityfocusafrica.com

CALENDAR

Conferences, events & exhibitions of interest to the security industry LOCAL EVENTS: 2019 MAY 14-16: Securex South Africa 2019 Venue: Gallagher Convention Centre, Midrand, Johannesburg Tel: +27 (0)11 835 1565 www.securex.co.za. MAY 14-16: A-OSH EXPO Venue: Gallagher Convention Centre, Midrand, Johannesburg Tel: +27 (0)11 835 1565 www.aosh.co.za.

INTERNATIONAL EVENTS: 2019 APRIL 9-11: The Security Event Venue: NEC, Birmingham, UK Tel: +44 1202 022 108 Email: marketing@thesecurityevent.co.uk www.thesecurityevent.co.uk/securityevent-home APRIL 10-12: ISC West Venue: Sands Expo & Convention Center, Las Vegas, NV, United States www.iscwest.com

APRIL 16-17: Securex West Africa Venue: Landmark Centre, Lagos, Nigeria Email: abby.cairns@montex.co.uk www.securexwestafrica.com/conference

OCTOBER 2-3 Finnsec – Helsinki, Finland Venue: Messukeskus Helsinki Email: customer.service@messukeskus.com www.finnsec.messukeskus.com

MAY 21-24: CNP Expo Venue: Marriott Marquis | San Francisco, CA www.cnpexpo.com

OCTOBER 17-20 Isaf – Istanbul, Turkey Venue: Istanbul Expo Center Hall Email: marmara@marmarafuar.com.tr www.isaffuari.com/en

MAY 22-23: Infosecurity Mexico 2018 Venue: Centro Citibanamex, Mexico www.infosecuritymexico.com MAY 29-31: IFSEC Philippines Venue: SMX Convention Centre, Pasay City, Metro Manila www.ifsec.events/philippines JUNE 18-20: IFSEC International Venue: ExCeL London UK www.ifsec.events/international/exhibit2019 SEPTEMBER 24-26: Securex East Africa Venue: Visa Oshwal Centre, Nairobi www.securexpoeastafrica.com

OCTOBER 22-25 Interpolitex – Moscow, Russia Venue: All-Russian Exhibition Centre VDNH Email: eshatrova@mvkexpo.com www.interpolitex.ru/en OCTOBER 28-31 CPSE – Shenzhen, China Venue: Shenzhenb Convention & Exhibition Center Email: overseas_market@cps.com.cn www.cpse.com.cn OCTOBER 28-30 Bidec – Bahrain, United Arab Emirates Venue: Bahrain International Exhibition & Convention Centre Email: ahmed.jarakji@clarionevents.com www.bahraindefence.com

TEL: +27 11 452 1115 FAX: +27 11 452 3609 WEBSITE: www.plaslope.com EMAIL: glenda.aereboe@plaslope.com

TAMPER EVIDENT SECURITY BAGS • Debasafe® Tamper Evident Security Bags are used whenever tamper-evident movement is critical. • We manufacture to order and assist in tailor-made solutions to suit your security needs. • A comprehensive range of security features are standard on the bags and additional features can be added. • The sealing strip is used for exacting demands with a heat indicator displaying attempts to tamper. • Tampering by means of cold, heat, solvents, liquids & manipulation is clearly visible. • Bags can be customised according to customer’s requirements with exclusive numbering & bar-coding. • Bags are manufactured in either transparent or opaque LDPE film, in various grades to meet specific requirements.

The bags are used for the safe movement of: • Government Departments • Foreign Exchange • Confidential Documents (Examinations, Elections, Passports, Visas etc.) • High Value Items (Diamonds, Precious Metals, Forensic Evidence, Cellphones, Computer Equipment) • Cash (Banks & Cash-in-Transit companies)

securityfocusafrica.com

SECURITY FOCUS AFRICA APRIL 2019