Embed Size (px)
Citation preview
SECURITY NEWSLETTER
In This Issue:
Points of Contact
Security Training
ISD BIOs
NCMS Conference
Security Puzzle
FSO poster
Alutiiq’s Industrial Security Department Stands ready to serve Alutiiq’s employees. The purpose of this security newsletter is to provide security
information to Alutiiq’s employees in order to keep them informed on the ever changing security arena.
Alutiiq Security Newsletter Vol 1 No 5 4th Qtr FY 2016
INDUSTRIAL SECURITY DEPARTMENT POINTS OF
CONTACT
Matt Gail
Director of Industrial
Security/FSO
907 222 9553
Susan Dagney
Corporate Industrial
Security Manager
757 819 6046
Edrie “Gary” Graham
Security Specialist
843 377 1760
Jadis Rhodin
Security Specialist
757 842 4041
Kim Montgomery
Security Specialist
858 751 1898
Richie Griggs
Security Intern
907 762 9441
Alutiiq Security email:
IS IT REALLY WORTH IT?
Say NO! to Foreign Intelli-
gence Specialists!
“For the first time, insiders have overtaken computer viruses as the most frequently reported type of security incident. In this climate, businesses cannot afford to allow security awareness to slacken. While training dollars may be more limited, the need for security is as great as it’s ever been. However, it appears that companies are not spending much on security awareness on a per-employee basis. The aver-age amount spent annually on security awareness is only $10 per employee. The findings from this and other related studies indicate that awareness training is falling short with many organizations consigning it to a once a year activity or even ignoring it altogether. Experts warn that organizations that fail to train their workers in security fundamentals do so at their own peril. Interestingly, nearly 90 percent of organizations that have implemented ongoing awareness training believe that the number of security breaches they’ve encountered has been reduced, according to research. The message here is that complacency can be a serious security threat and hav-ing the latest security hardware and software means nothing if end users don’t practice cyber security. And the best way to get employees to ‘think security’ is to create an ongoing culture of security at your company. The stakes are high and getting higher all the time. “Security awareness isn’t one of those things that organizations do for fun. It’s 24/7 and accountability starts with the CEO and is pushed to all corners of the organiza-tion.” Larry Ponemon, Ponemon Institute. So how does the Industrial Security Department go about creating a security awareness program second to none? Alutiiq’s Security Awareness Training:
1. demonstrates that security breaches not only adversely affect Alutiiq and its
employees but also the US and our national security. 2. focuses on and consistently reinforces the fundamentals of strong security practices such as adverse reporting and the behavioral traits of the Insider. 3. focuses on important security issues facing Alutiiq and its employees.
The Industrial Security Department’s training plans going forward… TO: 1. train employees to recognize security issues and how/where to report them.
2. get upper-level management buy-in to the security education program.
3. ensure that Alutiiq’s top executives understand and support security awareness
initiatives. 4. ensure that Alutiiq’s employees understands what the lack of good security can
mean. 5. to educate and inform Alutiiq’s employees on current threats. 6. ensure that Alutiiq’s employees know there is a clear chain of security respon-
sibility: that everyone has a role and everyone owns a piece of the problem and the solution.
7. make security fun so that we can raise levels of awareness. 8. encourage feedback on security education in order to continue to improve our
products. 9. continue to motivate employees about security issues by leading by example. 10. to identify, cover, and mitigate internal security problems before they threaten the Corporation, its subsidiaries, and employees.
Matthew Gail is the Director of Industrial Security and the Facility Security Officer for the Alutiiq Corporation and its Subsidiaries. He oversees the In-dustrial Security Department and their numerous and varied activities. He retired from the Marine Corps and has held various security positions including Foreign Disclosure, Red Team, OPSEC Officer, Anti-terrorism/Force Protection Assessment Team Member, COMSEC and Vault Chief, Security Specialist, Secu-rity Chief, Security Manager for a large USMC Communication Battalion, TS Cou-rier, Firearms Instructor, and a Special Agent for the Defense Security Service.
He got involved in the Security arena when he was on leave from Okinawa and unable to defend himself, was volun-told to take over as the Security Chief for a Communication Battalion. As usual with the military, the more he did, the more work came his way, as he took over the vault and COMSEC, and updated the SOP for both positions. He also couriered TS material around the Pacific, for various operations. Upon retirement he took over as the FSO for a mid-level cleared company as the Director of Security/FSO and upgraded a security program for 500-600 cleared employees. His security work took him to the US Army where he was a DoD Civilian Security Specialist, then the OPSEC Officer for a missile program, and back to the private sector as an OPSEC Analyst. During this timeframe he finished his Master’s Degree in Security Management before deploying to Iraq as the Foreign Disclosure Of-fice working for the US Army. Upon return to “The World” he went to work for the Defense Security Service, operating out of the Chantilly Field Office and then taking over the Alaska Resident Office where he had roughly 100 facilities under his purview. He retired from DSS and went back to the private sector in 2015, with the Alutiiq. He can be found riding his Harley all over Alaska, exceeding the speed limit with his hair on fire right up until the first snowfall, doing remodeling on his cabin, cooking up some grub, growing a variety of plants (no, not marijuana), pumping iron, and taking pictures all over the great State of Alaska.
Susan (Suzi) Dagney, Corporate Security Manager
Suzi started dealing with Security in 1984, when she joined the Navy. This was also the first time she filled out paperwork for a security clearance, and in over 37 years, it hasn’t gotten much easier to fill that paperwork out. Traveling and being stationed all over the world (Spain, Italy, Japan, and Australia, to name a few plac-es) meant she was always concerned with OPSEC and being aware of surround-ings and people, especially in foreign lands. Her Introduction to working with Per-sonnel, Communications, and Physical Security started in 1984, when stationed in Rota Spain, but was really brought to the forefront of her duties in 1997, aboard the USS Blue Ridge in Japan, where she was Security Manager for a ship’s com-pany of about 1500 Sailors. This activity kept her extremely busy, as there was always something of concern when there are that many sailors traveling to foreign ports all of the time.
(cont on page 4)
In 2004, after twenty years, she retired from the US Navy and came to work for Alutiiq. Her experiences in the Navy, and specifically on the USS Blue Ridge with Personnel, Physical, and Communications Security, made her resume stand out and she was hired for those qualifications. Shortly after starting with Alutiiq, JPAS (the DoD system of record for security clearances) was required to be used for all contract companies. The FSO for Alutiiq hired one of the JPAS programmers to provide Alutiiq’s Security Department with 16 hours of per-sonalized training. Because of that training, Suzi is considered a “JPAS Wizard” by many Se-curity Professionals.
In the twelve plus years Suzi has been working with the Alutiiq Family of Companies, she has become a Certified FSO and completed numerous courses through DSS, DoD, and oth-er Agencies. She is also a founding member of the Local NCMS Chapter, which is a world-wide organization of Security Professionals, and is a Chapter Officer. She attends meetings regularly for the most updated information and training, provided by the Government and other Security Professionals, and recently was able to attend the National Training Seminar with over 1500 other Security Professionals.
Suzi has moved up the security ladder to her present position as Corporate Security Manag-er, and manages a small department of Highly Qualified and Extremely Motivated Security Professionals. She oversees all of the cleared Companies, which, currently, is six-teen, and still growing.
Edrie “Gary” Graham—Security Specialist
After High School Gary joined the United States Navy where he served various-ly and sometimes concurrently as boat crew, boarding team member, landing party, shore patrol, prize crew member, and as mount captain for several differ-ent pieces of naval artillery. Having visited 27 foreign countries and posses-sions before the age of 21 Gary returned to Charleston, South Carolina and commenced living civilian life. Gary worked in the retail business world for both others and himself ultimately owning a business of his own. After many years he decided to take on a family project that required him to leave the country for a time.
Arriving in Bermuda with his wife, dog, cat, and a shipping container filled with his and the aforementioned family’s worldly possessions, Gary proceeded to renovate a property that had been in his wife’s family for generations as well as regularize legal issues that would have caused the loss of the property by escheat to the government of Bermuda. All of this he did while at the same time being engaged in litigation by a multi-millionaire who objected to the family’s continued ownership of said property. After restoring the property, satisfying the government, and ultimately winning the litigation decided by The Privy Council in England, Gary returned to The States.
Desiring a less stressful occupation Gary pursued lines of endeavor that led to him leading a team of AT&T contractor fraud specialists. Then, being incensed by the events of 9/11 Gary sought to do some-thing about it! This led to his employment with the Federal Government as a Lead Security Officer for The Transportation Security Agency as well as becoming a member of the United States Coast Guard Auxilia-ry concurrently. Gary became a founding member of the newly created Department of Homeland Security when both of these agencies became part of Homeland Security. Before becoming injured on the job and having to leave federal employ, Gary worked in the arenas of: physical security, personnel security, explo-sives detection, counter terrorism, force protection, public education and search and rescue.
Cont on Page 5
During the time Gary was being transitioned from the Federal Government back to the civilian workforce he worked for the US Coast Guard and its Auxiliary helping to “vet” the entire United States Merchant Marine, process government security clearance applications, run fingerprint SAC’s thru the FBI and serve as Flotilla Commander for his local USCG Auxiliary unit. Applying for and receiving a contract security position at SPAWAR with Alutiiq, Gary began what, until this day, is a sometimes all-consuming but yet enjoyable part of his life. Since working at Alutiiq Gary has worked as an AT/FP team member, Access control specialist, FSO, and Security Specialist in multiple fields to include industrial security, personnel security, physical security as well as counter intelligence.
Gary now lives in South Carolina where he serves as personal servant to two dogs while being supervised by his loving wife. Alas maybe one day his boat will get back into the water.
Jadis Rhodin—Security Specialist
Jadis Rhodin is the newest member of the Industrial Security Department. She is a Security Specialist for the Alutiiq family of companies and is located in the Chesapeake office is part of the Industrial Security Department. While navi-gating her way through college, she always knew she wanted a career that in-volved serving her country and feels this is her way of doing so.
She got involved in Industrial Security in 2011 when she fell in to the position of Assistant Facility Security Officer at Compass Systems, Inc. She immediately fell in love with security and knew this was her chance to finally serve her country. While in this position, she was determined to learn everything she could in the field and completed all required training from the Defense Security Service, re-ceived her Security Specialist and Homeland Security certification. After three years, she became the Facility Security Officer at General Dynamics Information Technology. She plans to continue her education to receive her Masters degree in Security Management.
In 2015, she relocated to Virginia and is looking forward to making Virginia and Alutiiq her new home.
Richie Griggs—Security Intern
My name is Richard Griggs but go by Richie. I am the Industrial Security Intern for the Afognak Native Corporation/Alutiiq Corporation.
I work under Matthew Gail (Matt) in the Industrial Security Department.
I graduated from Robert Service High in 2012, the summer before I had graduat-ed I had worked in the high school internship program at Afognak in the Human Resources Department under Stacy Smith.
I formerly interned in the security arena at Katmai Government Services as the Executive Assistant under Cynthia Vandenberg from April 2013 to April 2014.
In my free time, I can be found riding dirt bikes with my younger brothers, travel-ing, camping, fishing, hiking and helping my family.
Kimberly Montgomery—FSO Alutiiq Pacific in San Diego
Kimberly Montgomery is the San Diego ON Site FSO. I started doing Security back in 1987 as an assistant Security Rep. ORI Needed a FSO in 2000. I took the FSO Classes and was Certified as the FSO for 15 Years with ORI. Com-pleted numerous courses from DSS. I am also a member of NCMS. I attend ISAC training every May for Security Training. I have been with Alutiiq for two Years. I became the Local FSO in San Diego for on Site Support for Alutiiq. Since then we picked up a Classified Contract with Safe guarding
YOUR SECURITY TEAM AT THE RECENT
NCMS CONFERENCE!
The Key Note speakers were: Jessica Buchanan spoke about her kidnapping in Somalia in 2011 and
subsequent rescuing by SEAL Team 6. Dr. Sebastian Gorka spoke about the very real and continuing
threat of ISIS and other Terrorists in our country, and SA Scott Augenbaum, from the FBI, spoke on pro-
tecting ourselves in a Cyber conscious world. All in all, the training was phenomenal, the atmosphere,
was fun, and the networking with 1,500 other Security Professionals was well worth the trip.
In summation, this was an extremely insightful event as we learned a lot of information that was not
readily available outside of DSS, and the FBI, which would not be available otherwise. We are now bet-
ter prepared to face and implement the requirements and changes to our programs that are mandated
by the government and our contracts. This will greatly assist us in the coming year to remain in compli-
ance and insure our ability to maintain the required service levels required by our customers thus insur-
ing Alutiiq’s ability to obtain work in the future.
This year’s NCMS National Seminar was held at the
Gaylord Opryland Convention Center in Nashville TN.
Afognak/Alutiiq had 3 representatives that attended this
year. Richie Griggs came in from Anchorage, Gary Gra-
ham drove up from Charleston, SC and Suzi came in
from Chesapeake. The Seminar was well organized and
covered many hot topics, including insider threat, OPMs
Data Breech and what the cost and results have been,
Cyber Security, Protecting CUI (Controlled Unclassified
Information), and Export Compliance. Also we heard
from DoD CAF, PSMO-I, concerning the backlog of in-
vestigations, and what is coming in the future to alleviate
it. Training was also available for new programs that will
greatly enhance Alutiiq’s future security posture. Susan D, Gary G, and Richie G at NCMS
M N R J U G K F U S F B Q K F N O E X X
C U G T Y T N E I W V Q K H H Q T T V R
R E E B W O R M B D M F B N A F O G O V
I I L W P Z G D V B W M L X C X S Z M B
M B I G Z D W S P I Y D R C K M P B R Z
E M T G S M G P L U G G N U E A Y X Z U
W O S Y Z P Q O M I R G T Y R L W V Q P
A Z O Y B M H O G F V B G H S W A W P S
R P H F J G U F Z M U I U U F A R Y G P
E O R F V Z W I R I Y C D P F R E U Q E
P G M O O E H N Q V E G Y T P E D F F A
O N V D D M O G C P V O M M N D E R Y R
R I I Y J W X K K E X Z S Y N B W U S P
D H R H U R G W R L C I U V E L C L P H
A S U R T R I G G E R K I M C W L N A I
I I S J O Z P M D W I G M R O Q R Z M S
D H S O C I A L E N G I N E E R I N G H
E P H M W K D P E D W J G D A U H N F I
M S Q W M N M I Z N V O S O H T L A S N
W S N N I G Q G T C A Y X O K K A G F G
SPAM PHISHING VIRUS SPEARPHISHING SPOOFING
TRIGGER WORM HACKERS HOSTILE CRIMEWARE
MALWARE SPYWARE MEDIADROP SOCIALENGINEERING ZOMBIE
