This is the 21st article in the award-winning “Real Words or Buzzwords?” series about how real words become empty words and stifle technology progress, also published on SecurityInfoWatch.com.
By Ray Bernard, PSP, CHS-III
Across the physical security industry, the label “situational awareness” has been applied to products and systems that weren’t advanced enough to provide the capabilities truly needed.
★ ★ ★ GET NOTIFIED! ★ ★ ★
SIGN UP to be notified by email the day a new Real Words or Buzzwords? article is posted!
Real Words or Buzzwords?
The Award-Winning Article Series
#1 Proof of the buzzword that killed tech advances in the security industry—but not other industries.
#2 Next Generation (NextGen): A sure way to tell hype from reality.
#3 Customer Centric: Why all security industry companies aren't customer centric.
#4 Best of Breed: What it should mean to companies and their customers.
#5 Open: An openness scale to rate platforms and systems
#6 Network-friendly: It's much more than network connectivity.
#7 Mobile first: Not what it sounds like.
#8 Enterprise Class (Part One): To qualify as Enterprise Class system today is world's beyond what it was yesterday.
#9 Enterprise Class (Part Two): Enterprise Class must be more than just a top-level label.
#10 Enterprise Class (Part Three): Enterprise Class must be 21st century technology.
#11 Intuitive: It’s about time that we had a real-world testable definition for “intuitive”.
#12 State of the Art: A perspective for right-setting our own thinking about technologies.
#13 True Cloud (Part One): Fully evaluating cloud product offerings.
#14 True Cloud (Part Two): Examining the characteristics of 'native-cloud' applications.
#15 True Cloud (Part Three): Due diligence in testing cloud systems.
#16 IP-based, IP-enabled, IP-capable, or IP-connectable?: A perspective for right-setting our own thinking about technologies.
#17 Five Nines: Many people equate high availability with good user experience, yet many more factors are critically important.
#18 Robust: Words like “robust” must be followed by design specifics to be meaningful.
#19 Serverless Computing – Part 1: Why "serverless computing" is critical for some cloud offerings.
#20 Serverless Computing – Part 2: Why full virtualization is the future of cloud computing.
#21 Situational Awareness – Part 1: What products provide situational awareness?
#22 Situational Awareness – Part 2: Why system designs are incomplete without situational awareness?
#23 Situational Awareness – Part 3: How mobile devices change the situational awareness landscape?
#24 Situational Awareness – Part 4: Why situational awareness is a must for security system maintenance and acceptable uptime.
#25 Situational Awareness – Part 5: We are now entering the era of smart buildings and facilities. We must design integrated security systems that are much smarter than those we have designed in the past.
#26 Situational Awareness – Part 6: Developing modern day situational awareness solutions requires moving beyond 20th century thinking.
#27 Situational Awareness – Part 7: Modern day incident response deserves the help that modern technology can provide but doesn’t yet. Filling this void is one of the great security industry opportunities of our time.
#28 Unicity: Security solutions providers can spur innovation by envisioning how the Unicity concept can extend and strengthen physical access into real-time presence management.
#29 The API Economy: Why The API Economy will have a significant impact on the physical security industry moving forward.
#31 The Built Environment: In the 21st century, “the built environment” means so much more than it did just two decades ago.
#32 Hyper-Converged Infrastructure: Hyper-Converged Infrastructure has been a hot phrase in IT for several years, but do its promises hold true for the physical security industry?
#33 Software-Defined: Cloud-computing technology, with its many software-defined elements, is bringing self-scaling real-time performance capabilities to physical security system technology.
#34 High-Performance: How the right use of "high-performance" can accelerate the adoption of truly high-performing emerging technologies.
#35 Erasure Coding: Why RAID drive arrays don’t work anymore for video storage, and why Erasure Coding does.
#36 Presence Control: Anyone responsible for access control management or smart building experience must understand and apply presence control.
#37 Internet+: The Internet has evolved into much more than the information superhighway it was originally conceived to be.
#38 Digital Twin: Though few in physical security are familiar with the concept, it holds enormous potential for the industry.
#39 Fog Computing: Though commonly misunderstood, the concept of fog computing has become critically important to physical security systems.
#40 Scale - Part 1: Although many security-industry thought leaders have advocated that we should be “learning from IT,” there is still insufficient emphasis on learning about IT practices, especially for large-scale deployments.
#41 Scale - Part 2: Why the industry has yet to fully grasp what the ‘Internet of Things’ means for scaling physical security devices and systems.
#42 Cyberspace - Part 1: Thought to be an outdated term by some, understanding ‘Cyberspace’ and how it differs from ‘Cyber’ is paramount for security practitioners.
#43 Cyber-Physical Systems - Part 1: We must understand what it means that electronic physical security systems are cyber-physical systems.
#44 Cyberspace - Part 2: Thought to be an outdated term by some, understanding ‘Cyberspace’ and how it differs from ‘Cyber’ is paramount for security practitioners.
#45 Artificial Intelligence, Machine Learning and Deep Learning: Examining the differences in these technologies and their respective benefits for the security industry.
#46 VDI – Virtual Desktop Infrastructure: At first glance, VDI doesn’t seem to have much application to a SOC deployment. But a closer look reveals why it is actually of critical importance.
#47 Hybrid Cloud: The definition of hybrid cloud has evolved, and it’s important to understand the implications for physical security system deployments.
#48 LegacyHow you define ‘legacy technology’ may determine whether you get to update or replace critical systems.
#49 H.264 - Part 1Examining the terms involved in camera stream configuration settings and why they are important.
#50 H.264 - Part 2A look at the different H.264 video frame types and how they relate to intended uses of video.
More to come about every other week.
The transition from analog to digital technology and the resulting advances in security product capabilities, have forever changed the physical security technology landscape. It is not feasible to rip and replace physical security systems across an entire global or national enterprise. A new design approach is needed to enable end user customers to develop an evolvable intelligent technology infrastructure (illustrated here), one that provides the operational capabilities needed to respond to changing risks and changing organizations. An important part of that technology infrastructure should be situational awareness capabilities.
The Search for Situational Awareness
Years ago, it became apparent that the era of accelerating technology advancement had arrived. Data mining, machine learning and advanced analytics techniques had emerged in manufacturing operations, business management and other sectors. Seeing this, I was prompted to search for a physical security “situational awareness platform” that could live up to its name. Over the past two years, numerous vendors have promoted their offerings as situational awareness platforms or solutions, yet all the scenarios and examples I have been shown fell far short of my end-user clients’ security operations’ needs.
Security Operations Center (SOC) staff would process alarms, and Emergency Operations Center (EOC) teams would consume risk information feeds and geographical map information, but the burden was almost entirely on the staff to assess and define the situation, coordinate responses, and deal with communicating the unfolding situation. There was minimal support from security technology platforms, apart from active video surveillance and review of video recordings. A considerable amount of human effort was involved in managing incident response. The security system tools did not encompass response team and resource management, even on a small scale. The burden of situational awareness would transfer quickly from technology platforms to individual operators, where human capabilities can only go so far.
For example, small incidents, like two trespassers on facility grounds or door forced open alarms, were easily dealt with. After viewing a video display automatically triggered by the alarms, a security officer would be dispatched to respond the alarms. Video systems would provide tracking to help officer response to situations like a terminated employee gaining unauthorized building access by tailgating. However, on close examination, it could be seen in these incidents that the actual situation wouldn’t be understood until an officer directly observed or engaged in dialogue with one or more threat actors, which can be a very risky approach.
Can True Situational Awareness Be Achieved?
I’m not saying that current-day video system and other technology capabilities are not impressive and critically important. They are. However, my observation of the use of situational awareness technologies was that for most incidents, “alarm awareness with remote observation via video” would have been a more fitting description than “situational awareness”. Situational awareness usually occurred mid- or post-incident. When the responding officer achieved situational awareness, it often couldn’t be communicated, because even brief radio use would interrupt effective handling of the offenders being confronted. When a multi-person or multi-team response was required, achieving real-time situational awareness at the operational level was rarely possible.
In the preface to their 2011 book, Designing for Situation Awareness: an Approach to User Centered Design, Second Edition, authors Mica R. Endsley and Debra G. Jones describe a situation that prevails across many industries and management domains, not just physical security: “While a clear understanding of one’s situation is undoubtedly the critical trigger that allows the knowledge, skills, and creativity of the human mind to be successfully brought to bear in shaping our environment, very often people must work uphill, against systems and technologies that block rather than enhance their ability to ascertain the information they need. Knowledge in a vacuum is meaningless. Its use in overcoming human problems and achieving human goals requires the successful application of that knowledge in ways that are contextually appropriate. Yet, across a wide variety of engineered systems, people face an ever-widening information gap—the gulf between the data that is available and the information that they really need to know.”
In physical security, it isn’t quite the case that technology blocks the ability to obtain information, rather it is that product and system capabilities are insufficient to obtain and share the information needed. I believe that this primarily results from a poor concept of what situational awareness means in the context of security operations. The label “situational awareness” has been applied to products and systems that weren’t advanced enough to provide the capabilities truly needed.
In the physical security industry, the adoption of information technologies to provide situational awareness functionality has to date been done mostly using a technology-centered approach, rather than a human-centered approach. If you doubt this, perform an Internet search on “Total Situational Awareness” and check the results; the articles relevant to physical security are centered around technologies.
Can We Truly Achieve Situational Awareness?
Wikipedia provides an excellent article on the topic, which opens with this definition: “Situational Awareness or Situation Awareness (SA) is the perception of environmental elements and events with respect to time or space, the comprehension of their meaning, and the projection of their status after some variable has changed, such as time, or some other variable, such as a predetermined event.” That’s a very high-level conceptual definition. However, the article then proceeds to present a look at the full landscape of situational awareness, including a good diagram of the factors involved in a human-centered approach to achieving situational awareness.
The next article (Part Two) on Situational Awareness will provide an operations-level definition for “situational awareness” that fits security and emergency response requirements. It will apply the diagram (of a human-centered approach) to specific risk scenarios. And it will reference materials that include 16 risk-specific examples that illustrate the breadth of requirements for security situational awareness and incident management. You’ll be able to take this knowledge and understanding with you to the next security trade show you attend.
Ray Bernard, PSP CHS-III, is the principal consultant for Ray Bernard Consulting Services (RBCS), a firm that provides security consulting services for public and private facilities (www.go-rbcs.com). He is the author of the Elsevier book Security Technology Convergence Insights available on Amazon. Mr. Bernard is a Subject Matter Expert Faculty of the Security Executive Council (SEC) and an active member of the ASIS International member councils for Physical Security and IT Security.