ELECTRONICACCESS ANDELECTRONICSECURITY BUDGETPRESENTATION

Transcription

1 ELECTRONICACCESS ANDELECTRONICSECURITY BUDGETPRESENTATION University of Florida Physical Plant Division February 19 th, 2013

2 AGENDA Overview Strategic Value Complexity of Management Governance & Staffing Plan Funding Initiatives for Future Consideration Conclusion

3 OVERVIEW

4 OVERVIEW Lenel OnGuard system established in 2004 as the University s central enterprise-wide electronic access control and electronic access security standard. Electronic Access Control Card access Biometrics Keypad Access logging Electronic Security Video surveillance Intrusion detection Panic alarms Alarm monitoring

5 REASONS FOR STANDARDIZATION Lack of standards Implementations not in good order Lack of consistent administration Need for compliance with federal security regulations Improve system redundancy and dependability No defined roles, responsibility, and accountability No formal procedures and training Decentralized or no monitoring Improve cost

6 STRATEGICVALUE

7 STRATEGICVALUE Before After

8 ACCOMPLISHMENTS Standards Design and construction standards Hardware standards Vendor qualifications High-security installation protocols ADA door integrations On-campus vendor registration Access Data UFID Gator 1 card and Shands ID cards differentiated Master access to UFPD officers Real-time cardholder integration Departmentally specified access control logic, badge activation/deactivation Semester bulk access level updates to local administrators

9 ACCOMPLISHMENTS(CONT.) Hardware Remote desktop server access to local administrators High availability server with internal redundancy System controllers located in secure rooms Controllers on PPD automation VLAN ACL-level network security system wide Platform independent video recording devices Monitor and Notification Alarms and video available to UFPD Electronic hardware malfunctions Power supply failure

10 ACCOMPLISHMENTS(CONT.) Administration Registration and training for local administrators End user contracts Alarm monitoring agreements Multiple occupancy agreements Purchasing review

11 RISKS Personal safety Loss of research capability Fines for non compliance Potential liability lawsuits Loss of assets Inability to restrict sensitive information and space Lack of accountability Unfocused expense

12 REGULATORYREQUIREMENTS Designation of a security officer Establish a security subject matter expert team Develop and implement a written security plan Requirements for a robust IT and security management system Intrusion detection system unless physically occupied Redundant systems / security maintained in power failure Minimum of 3 security barriers One barrier monitored for circumvention of established control measures at all times in all conditions Security force response in 15 minutes or barriers sufficient to delay until response

13 REGULATORYREQUIREMENTS(CONT.)

14 COMPLEXITY OFMANAGEMENT

15 BUILDINGSTATISTICS

16 COVERAGE BY TYPE OF SPACE

17 COMPLEXITY OF MANAGEMENT Currently the Lenel system has connectivity to: 91 Buildings in Alachua, Marion and Orange counties 1,253 internal and external doors 17 vehicular or pedestrian gates 36 elevators Covers 30,548 access control cardholders 97 User Segments (control panels) 15 intrusion detection devices 509 video surveillance cameras in or around 26 buildings 73 panic devices monitored by UFPD 10 thick client stations for security guards and UFPD Dispatch 4 Motor Pool gas pumps We support card readers, key pads, hand geometry and iris scanner technology along with 8 different types of cards

18 SERVICES New and existing building installation construction design New and existing building construction management Transitioning of existing systems Policy and standards Design, Maintenance, Compliance Monitoring Design and development Purchasing review and quote development Customer maintenance Customer support End user training Database administration Vendor qualification and management Process improvement New technology evaluation

19 INTERFACES

20 CHALLENGES Responding to requests rather than executing a Master Plan (exception new and renovated space) No established criteria for valuing request for installations No dedicated security counterpart in Central IT organizations Providing a full array of services but not meeting our own or customer s expectations Delays in response to customers No capability for immediate telephone support Areas wanting to transition have long waits No robust plan for 365/7/24 service Current staff dedicate a very large amount of personal time to meet the needs of the University but not enough hours in the day to keep up with increasing need

21 GOVERNANCE& STAFFINGPLAN

22 GOVERNANCE& STAFFING PLAN

23 FUNDING

24 BUDGET Lenel Budget Flat 2014 Optimal PPD Salary 164, , , , ,130 PPD Expenses 21, , , , ,786 PPD Total 186, , , , ,916 UF Salary 285, , , ,340 UF Expense Not Defined Not Defined Not Defined Not Defined Total w/uf Salary 186, ,563 1,009,468 1,063,828 1,056,256

25 BUDGETASSUMPTIONS Staffing Levels to bring current operations up to standards and growth consistent with historical rate. Does not include other UF units baseline budget or projections for security. Operation budget for replacement parts for panels, readers, keypads, Lenel intrusion devices, ADA and electrified door hardware, and gate hardware. Growth consistent with historical rate. Video, biometric devices, panic alarms and other specialized equipment not included in central budget. Capacity upgrade in 2015 to NEC redundant servers and NEC cluster software. No new installation cost included. No cost for future master plan initiatives.

26 INITIATIVES FORFUTURE CONSIDERATION

27 INITIATIVES FORFUTURECONSIDERATION Add video surveillance on campus emergency blue light phones and in high-crime areas or high-priority areas Provide UFPD with a hardened facility and improve UFPD Dispatch Center Implement campus-wide video analytics system and monitoring service Implement access control on building envelopes of all classroom buildings, dining halls, admin buildings and other areas open/closed on a daily basis

28 INITIATIVES FOR FUTURE CONSIDERATION(CONT.) Encourage campus-wide standardization of intrusion detection systems Install video surveillance and panic buttons in high-level administrative offices Change Gator 1 Cards from magnetic stripe to smart cards

29 CONCLUSION

30 RESEARCH SOURCES National Association of College and University Business Officers (NACUBO) National Campus Safety and Security Project Survey Virginia Polytechnic Institute and State University University of Pennsylvania University of California at Berkeley Cleveland State University University of North Texas University of Maryland at College Park University of Illinois Urbana-Champaign University of Glasgow Lenel Designed Security Inc. The Chronicle of Higher Education Campus Safety Magazine CSO Online Security and Risk Magazine American Association for the Advancement of Science News Education Portal.com

31 LENELEXPERTS PATRICIA ZABRISKIE ITS MANAGER JAMIE SERRATO SYSTEM ENGINEER

32 QUESTIONS?

33 PPD LENELMANAGER Directs and advises the University in electronic access control and security system matters Develops, recommends and implements policies and construction standards Responsible over all activities related to PPD Lenel IT Unit Project management for new construction, existing security system transitions and major security IT system improvements and upgrades Maintain proper service capacity meeting customer needs and following industry best practices Serve as a member of the Security Council

34 PPD SYSTEMENGINEERS Responsible for system configuration, performance, data structure and integrity Develop plans and strategies to provide the most secure, functional and accessible electronic security system to end users Demonstrate technical leadership, embrace collaborative solutions, recommend prudent software and hardware upgrades to provide the required level of services Interact technically with network support staff, application vendors, security hardware technicians and local administrators Responsible for the implementation of new and transitioned electronic security systems and troubleshooting system issues.

35 PPD LENELDATABASEADMINISTRATOR Responsible for the system maintenance of the application and underlying database platform Interacts with the primary campus end users Until there is a need for two database administrators or more there needs to be a primary and a designated back up

36 PPD ELECTRONICTECHNICIANS Responsible for the repair, maintenance and troubleshooting for: Campus Lenel electronic access control components Wiring Power supplies Automatic door operators Electrified door hardware

37 PPD APPLICATIONSUPPORT System administration Maintains end user information Provides end user support Maintains internal PPD documentation Purchasing and inventory control