The One Percent - Circuit Magazine -

source: https://circuit-magazine.com/the-one-percent/

Corporations have sophisticated firewalls and other countermeasures; individuals are largely helpless. Some think they have a plan against this threat, but the reality is that security is never 100 percent, and attackers, the one percent, always have the advantage.But there is a path forward – by unifying security, political, social, and economic measures

– Mike Tyson –

The One Percent Cybersecurity provider NTT Security reports that five countries are the most common sources to 50 percent of global cyberattacks (Figure 2). Akamai states that two-thirds of Distributed Denial of Service (DDoS) cyberattacks originate in ten countries.Symantec, another provider, adds 13 more countries for a total of 23 countries, which are homes to the worst cyber offenders and who are responsible for two-thirds of all malicious internet activity.

The FBI states the odds of a criminal getting caught in the United States are approximately 1 in 5.Applied to the 0.7 percent incarceration rate in the US, 693 per 100,000 people, the second highest global incarceration rate, the criminal population may be five times higher, up to 3.5 percent of the US population. Since FBI crime statistics are credible, represent crime in ethnically and racially diverse geographical areas, and every country has a criminal element (either incarcerated or inclined to commit crimes), it is not a stretch to say that up to 3.5 percent of the global population are either criminals or have criminal tendencies.

Since malicious/criminal behavior is no less prevalent online, up to 3.5 percent of internet users may be engaged in cyber-enabled crime such as malicious hacking, fraud, the purchasing of illegal drugs and child sexual exploitation. Britain’s National Crime Agency states that the average hacker age is now 17. This age falls in the 15-24 age group, which represents 26.5 percent of internet users. By extrapolation, malicious hackers may account for up to 0.9 percent of internet users.

The Diagnostic and Statistical Manual of Mental Disorders (DSM-5), the definitive diagnostic reference for mental health practitioners, states that Antisocial Personality Disorder (ASPD) is:

“a pervasive pattern of disregard for and violation of the rights of others…as indicated by repeated lying, use of aliases, or conning others for personal profit or pleasure…lack of remorse, as indicated by being indifferent to or rationalizing having hurt, mistreated, or stolen from another.”

Malicious or criminal behavior fits the DSM-5 ASPD and may run as high as 5.8% in men and 1.9% in women. With men and women representing 53 percent and 47 percent respectively of global internet users, it is estimated that up to 4 percent of internet users have ASPD.Considering the average hacker age (15-24 age group), it is estimated that up to one percent of internet users may be malicious hackers, a finding which approximates the previous 0.9 percent.The DSM insight suggests that there are more male than female hackers, by a ratio of 3 to 1. Based on internet demographics, a global cybercriminal population of 46 million is not beyond the pale.

A Framework for Social Change Criminal activity is typically a country problem.What sets cybercrime apart from usual criminal activity is that hacking knows no borders. Security measures alone will not work – this approach requires the willingness to apply extreme measures, a solution society would view repressive on a 17-year old hacker. A better approach and one grounded in history aims to marginalize and ultimately coopt hackers through unified security, political, social, and economic measures.

Legitimacy, the right, and acceptance of authority and of exercising power, is critical to achieving change. Politicians and civil leadership must collectively reinforce that the judicial system and law enforcement actions against malicious hackers are appropriate uses of power vested by legally established governments.On a cautionary note, history has shown that excessive use of power can undermine legitimacy.

For this reason, civil institutions must be part of the solution.For a model, consider Sweden’s drug policy, which includes preventive measures involving schools, clubs and associations, social services, psychiatric services, etc. Measures are supplemented by targeted interventions aimed at individuals and groups in risk zones.Outreach and support programs under umbrella organizations such as Health and Human Services can intervene; so can community anchors such as churches, synagogues, and mosques. Surveillance raises privacy issues, but these are manageable by effective governance and compliance.

Capabilities Not Met More than 1-in-5 businesses have no confidence in responding to a cyberattack. Lack of confidence points to shortcomings in people, processes, and technology to deal with cyber events.Budgets for cybersecurity vary, but large organizations should target 0.4 percent of revenue. Some spend more. Microsoft is estimated to spend twice that. With global GDP at US$ 86 trillion, this would suggest global cybersecurity spending should be US$ 344 billion.Businesses spend a third of this amount – research firm Gartner estimates 2019 cybersecurity spending amounted to US$124 billion. With cyberattacks costing US$1 trillion annually, cybersecurity spending should increase.

Insurers have a role to play in protecting client businesses from risks.Cyber policy coverage provides services against attacks and immediate access to legal and technical resources, often coaching businesses through an attack. Insurers can assess the insured to a cybersecurity maturity framework. Assessments benefit multiple parties.The insurer benefits by setting rates based on risk.The insured can remediate identified cyber gaps, and once resolved, should qualify for a lower premium.Assessments are also important to governance and compliance, providing assurance to company stakeholders and shareholders.

Historical Context Insurgents and malicious hackers share some characteristics – first mover advantage, often control of the narrative with news headlines, the weak against the strong, and control through subversion.Given the similarities, we may be able to draw on counterinsurgency lessons learned.

One counterinsurgent per 357 in a population in a peaceful situation and one per 40 in hostile environments is generally accepted as the minimum.The most recent US lesson in Iraq provides guidance, particularly what not to do. Despite quickly defeating Iraqi military forces, the US never adequately planned for the occupation of Iraq, and its presence was never large enough to maintain civil order.Decisions to disband the Iraqi Army and the de-Baathification of the government were incredibly misguided and contributed to subsequent chaos. US forces never approached a 40 to 1 counterinsurgent to population ratio (Figure 3).With loyalties divided along ethnic lines and despite sizeable numbers, Iraqi Security Forces were never a competent or cohesive force under the divisive leadership of Prime Minister Nouri al-Maliki (2006-2014).Since then, even under Adnan al-Zurfi, these issues, as well as lack of governance and nepotism, continue to negate the effectiveness of Iraqi Security Forces.

In direct contrast, Winston Churchill was quick to grasp the counterinsurgency challenges Britain faced during the Malayan Emergency (1948-1960).In one of his first actions as Prime Minister (1951-1955, his second time) he appointed General Sir Gerald Templer with greatly expanded command and control authority to defeat the Chinese Communist guerrillas. Templer deployed “clear and hold” operations and population-centric (“winning the hearts and minds”) tactics, the basis which remains a successful counterinsurgency strategy.In contrast to the US involvement in Iraq, security forces were very visible during the Malayan Emergency amounting to one member for every 16 civilians (Figure 5).It also helped that Chinese guerrillas had limited support among the Malay population (55 percent Malay, 35 percent Chinese, 10 percent Indian in 1957), and Malays firmly supported the government, including heavily enlisting in the security forces.

Closing Thoughts By any assessment, the fabric of society is under siege.Malicious hackers are threatening society by subverting a critical means of communication. While the role of government can be debated, unequivocal is its responsibility as a protector, to provide the safety of law and order, protecting citizens from each other and against foreign enemies.Its obligation extends to essential economic infrastructure, including cyberspace.The fight against hackers requires marshaling society’s resources into a coalition front.And for that, we need, foremost, political leadership.

The One Percent By: Jeffery Mayger

Mr. Mayger is an information Security Consultant at Concord.His background includes Chief Information Security Officer (CISO) for global mining company Sibelco.In addition to his B.S in Mechanical Engineering, Mr. Mayger also holds a Master of Business Administration (MBA) from the University of Texas, is a Certified Information Security Professional (CISSP), Certified SCADA Security Architect (CSSA), and a designated Payment Card Industry Professional (PCIP). He can be contacted at jeffery.mayger@concordusa.com.

The post The One Percent appeared first on Circuit Magazine.

Tactical Firearms Training – The Basics

If you plan on working internationally in the close protection or security industry you will be expected to some degree to know how to handle firearms. Now, to get things straight to start with, what most people, especially Americans, don’t realize is that most non-government close protection jobs are unarmed due to the legal restrictions on firearms in most countries. Part of your threat assessment for any assignment needs to include the laws on the use of force and what if any weapons are legal in the locations you are going to be working in. Being caught with an illegal weapon, especially a firearm will get you thrown in jail very quickly, no matter how important you think you are! So, what do you need to know about firearms if you are looking to work internationally in the close protection and security industry, well the first and most important thing is knowing how to use firearms safely. To become proficient with firearms, like everything else takes practice and time, you’re not going to become and expert after a few hours’ tuition. Many firearms related accidents happen because those handing the firearms are not complying with the basic firearms safety rules of keep the firearms pointed in a safe direction and keeping their fingers off the guns trigger. If you ensure you always follow these two safety rules, you will be acting more responsibly than many others who are working with and carrying firearms. Remember, if you’re the one holding and in control of a firearm that accidentally discharges and injures or kills someone you will be held responsible. A thorough understanding of firearms and range safety is essential before you even start any shooting with live ammunition. Here is a more complete list of firearms safety rules and considerations. WEAPON SAFETY DEPENDS ON KNOWING YOUR WEAPON, CONFIDENCE, ALERTNESS Safety considerations for firearms must always be followed Always keep firearms pointed in a safe direction, especially when loading and unloading. Keep your finger off the trigger until the weapon is pointed at your target. If the action or slide on the weapon is closed, always treat the gun as if loaded and carry out the unload drills. Always show that a firearm is unloaded to a person before you hand it to them. When someone hands you a firearm, always check the chamber and make sure it is unloaded. Never take a person’s word for whether a firearm is loaded or unloaded, always check! Never point a firearm at anyone just for fun or play games with firearms. Always know what is behind your target and have a good backstop. Only fire-controlled shots. You can rapid fire but make sure you are hitting your target. Always practice tactical drills with unloaded firearms until you’re confident and competent enough to use live ammunition. Always unload firearms before dry-fire tactical training. Only use dummy ammunition or blank-firing firearms for demonstrations or dry-fire drills. Never mix blank, dummy, and live rounds. Always check that the gun is unloaded before cleaning. Never tamper with ammunition, and only use reloads from reliable sources. Never use damaged rounds, and always dispose of them safely. Keep guns and ammunition in secure storage when not in use. If you do not know how to operate or are having problems operating a firearm, get professional help. Never used drugs or alcohol when using firearms. Always check and comply with local firearms law Types of Firearms You should try to train with and get to know as many different types of firearms as possible as you never know what you will come across. You might be working unarmed on an assignment in a hostile environment but you need to know how to use the firearms you might encounter in that environment incase things go bad, say your hotel is attacked, and you might have to use the firearms of the local security, police, military and bad guys or make them safe after an incident. Pistols: The two main classification for pistols are semi-automatic and revolver. Sadly, most people these days tend to only train with semi-auto safe action guns such as Glock and S&W M&P’s etc. You need to know how to safely use revolvers, single and double action semi-autos, single action semi-autos and at least be familiar with derringers and sub-compact pocket pistols. Shotguns: I have heard quite a few supposed close protection experts, usually from police backgrounds dismiss the requirements for shotgun training. The reason for this I believe, is in their limited experience within a government agency they have never had the opportunity to use shotguns or travel to locations where they are used. I have personally working in Europe, South & West Africa, Middle East, US, Caribbean, Latin America and have come across shotguns being used in for security details in all of those locations. I would say shotguns are the most widely used firearm used for legal security purposes globally. Shotguns come in various configurations and you should at least understand break action, pump, semi-auto shotguns and the various types of ammunition and chocks. Assault Rifles: Even though most of the tacticool firearms training videos on the internet put an emphasis of training with AR-15’s and AK-47’s in reality there are not many places you can legally use them for security purposes unless you are in the military, on a government related assignment or working illegally. In Iraq and Afghanistan, the laws were put in place for security guards to carry assault rifles, but in most places if you are lucky enough to legally have firearms there is a greater change of it being a shotgun or a pistol rather than an AK etc. Sporting Rifles: In a lot of countries semi-auto firearms are banned or very restricted and the only legal firearms available will be sporting shotguns and leaver or bolt-action rifles. The only time most tacticool operators will consider learning how to use a bolt-action rifle would be if it was a tricked-out sniper rifle… Well, I am sorry if I offend any tacticool operators reading this but all hunting rifles, even with wood stocks, can be used as sniper rifles and for tactical applications. If someone is trained how to shoot properly, understands individual tactics and is armed with a decent leaver or bolt action .22 rifle, I would class them as far more value than the tacticool shemagh wearing operator who uses optics on their tricked-out AR-15 to hit paper targets at 15 meters… Other Firearms: Depending on where you are planning to work depends on the types of firearms you could encounter; in hostile environments you may need to have the rudimentary knowledge of how to operate belt-fed machine guns. Or, if you’re in an area where hunting is popular it might make sense to learn a little bit about black powder rifles and pistols, which in some places have a lot less restrictions on them than cartridge firing firearms. Tactical Firearms Training I have my own views of firearms training and the state of the firearms training industry but will try to keep them to myself as much as I can for the sake of this article. My basic advice to anyone looking at attending any firearms training courses would be is the course relevant and is the instructor experienced enough to teach it. The best place to get a good grounding in firearms training is in the military as you should be given thorough training, the bullets will be free, and you will also be getting paid for your time. There is no way you can replicate a few years military firearms training experience by taking a two-week tactical firearms course. One issues with those who have only had regular military training is that they are only used to dealing with a limited range of firearms. Personally, I only really started to learn and use handguns other than a Browning Hi-Power after I left the British Army and worked in South Africa, Eastern Europe and then joined a gun club in UK before handguns were banned. You must ensure the training you will be getting is relevant for what your going to be doing and is of a good standard. In the U.S. the general standard for training is what’s put out by the National Rifle Association (NRA). Most people don’t realize when taking a training course from an NRA instructor that it only takes one-day to become and NRA instructor or Range Safety officer. In the United States, it’s easy for a novice shooter to become an NRA firearms instructor, as I said it’s a one-day course, SERIOUSLY! With another one-day course they can become a Range Safety Officer, and after that with another one-day course a Chief Range Safety Officer able to certify Range Safety Officers… All without any experience of ever running a firearms course or any experience of actually working on a shooting range… I have come across NRA instructors who could not field strip their own firearms, Chief Range Safety Officers who had never used revolvers or shotguns. From their certifications you would expect them to be experienced professionals! Well, think again… You cannot gain the experience required to be a decent RSO or instructor by just attending a few theory classes, watch tacticool YouTube videos and belonging to Gung-ho online chat forums. The schools issuing these NRA certifications are making money, it’s business, but how many of their students then go on to market themselves as “firearms experts” after just a few one-day classes? I think this can be classed as fraudulent in anyone’s books. It’s just like taking a first-time driver, giving them a two- or three-day theory on how to drive, showing them a car, starting the engine and then certifying them to set up a driving school… Scary, right? Always verify the real-world experience of the instructors who you’re intending to pay good money for quality training. Firearms training can be very expensive so ensure you’re not wasting your money and understand that after just a few days training you’re not going to be at a professional level, whatever your certificates say! Ongoing dry and live firearms training and weapons familiarization is essential if your serious about working in hostile environments but learn to differentiate the difference between tacticool holidays and experiences and relevant training! Tactical Firearms Training – The Basics The post Tactical Firearms Training – The Basics appeared first on Circuit Magazine.

Why Consider A Career in Executive Protection? - Circuit Magazine -

Newcomers Corner, Why Consider A Career in Executive Protection? written by Harlan Austin for issue 54 of the Circuit Magazine

Weaponising Social Media - Circuit Magazine -

James Bore looks at Weaponising Social Media, conspiracy theories and opportunistic misinformation is misused taken from Issue 54 of the Circuit Magazine

Trunk Guns - Circuit Magazine -

One of the biggest ongoing phenomena is the firearms space is the concept of a trunk gun. Whether it is a handgun, shotgun, or a rifle, firearms are simply tools. When it comes to any tool, you first must ask what is your objective? Let's begin by considering the history or evolution of this phenomenon.

The Importance of Emotional Control in the Workplace - Circuit Magazine -

Denida Zinxhiria Grow looks at The Importance of Emotional Control in the Workplace, a Guide for Executive Protection Operatives from issue 54

Tactical Firearms Training – The Basics

Why Consider A Career in Executive Protection? - Circuit Magazine -

Weaponising Social Media - Circuit Magazine -

Trunk Guns - Circuit Magazine -

The Importance of Emotional Control in the Workplace - Circuit Magazine -

Circuit Magazine

Categories

Social Footprints