Federal Dynamics Company’s (FDC) Office of Risk Management (ORM) is the industry leader in all aspects of physical risk management including Security Planning, Resilience Planning and Penetration Testing covering a wide variety of plans ranging from Security Master Plans, Business Contingency Plans, and Emergency Response Plans, to Threat Risk & Vulnerability Assessments, Security Audits and Red Team Exercises.
FDC’s Office of Risk Management operates globally and either works with vetted and security-cleared risk experts in the host country, or deploys its own rick professionals from North America.
FDC’s Office of Risk Management supports both governments and corporations operating in high risk counties including: Mexico, Central America, South America, Central Asia, East Asia, South Asia, North Africa, East Africa, West Africa, Central Africa, the Middle East and Eastern Europe.
FDC’s Office of Rick Management and its international team of Subject Matter Experts have spent their careers ensuring that high risk government installations and facilities are secure from threats, both domestic and foreign.
FDC’s Risk Management Professionals are highly trained to conduct risk assessments that follow strict government procedures and methodologies including the U.S. Department of Defense’s CARVER Matrix, the Royal Canadian Mounted Police (RCMP) Methodology, and Crime Prevention through Environmental Design (CEPTED).
FDC’s Subject Matter Experts not only retain their federal ‘SCI, ‘Top Secret’, ‘Secret’ or ‘Confidential’ clearances, but also have years of practical experience developing operational, physical and personal security plans, audits and assessments for governments agencies including: U.S. Secret Service; U.S. Marshal’s Service; Ontario Provincial Police; Federal Bureau of Investigation; Central Intelligence Agency; Royal Canadian Mounted Police; Pentagon Force Protection Agency; National Nuclear Security Administration; National Aeronautics and Space Administration; Scotland Yard; and the U.S. Diplomatic Security Service.
FDC and its Subject Matter Experts are members of a wide variety of security and law enforcement organizations including: International Association for Healthcare Security and Safety; Canadian Association of Defense and Security Industries; Association of Former Agents of the U.S. Secret Service; International Association of Airport Executives Canada; Association of Threat Assessment Professionals; International Association of Chiefs of Police; Association of Former Intelligence Officers; American Chamber of Commerce in Canada; American Society for Industrial Security; and the National Defense Industrial Association.
FDC’s Risk Management Professionals have spent their careers developing, testing, and analysing physical and technical security strategies at high risk facilities ranging from: The White House Complex, The Pentagon and the Kennedy Space Center; to NATO Mission Essential Vulnerable Areas within Benelux; to the London 2012 Summer Olympics, 2010 G20 Toronto Summit; and the 2012 Republican National Convention.
Current risk management studies have included strategic security assessments and audits on behalf of Infrastructure Ontario, Ontario Ministry of the Attorney General, Social Justice Tribunals of Ontario, Liquor Control Board of Ontario, Toronto Public Library, various municipal school boards, major public events, and other multinational office, research and manufacturing complexes.
A Security Master Plan is essential for any organization in order to provide a vision and mission for the security departments, its staff, and their duties and responsibilities. Equally as important however, the plan is created to be a strategic fit within the overall corporate structure and culture to ensure that management and employees accept the security plan. The plan will not only address roles and responsibilities of management and staff, but also individual protocols, policies and procedures for preventing, detecting, investigating and responding to incidents.
Effective security policies and procedures must cover a vast array of potential risks and clearly define the roles and expectations of not only employees, but senior management, third party security providers, first responders and continuity partners. This multidisciplinary approach will address policies and procedures that will not only include property risks such as bomb threats, power outages, fire, explosions, and natural disasters, but also personal risks such as active shooters, workplace violence, executive protection, kidnap and ransom, and global travel. Given the complexity of most corporations, as well as their multinational presence, FDC can create policies and procedures that cover all possible threats and disasters in an effort to minimize corporate risk and exposure.
Threat, Risk & Vulnerability Assessments are conducted to evaluate the security threats and risks to information, programs, systems, services and physical spaces. A TRVA typically examines four areas: personnel, physical environment, records/information, and technology. The TRVA is a structured method of gathering threat profile information in order to determine the adequacy of current safeguards from the point of view of requirements, efficiency and cost. Comprehensive TRVAs are essential to securing any corporation and FDC’s multidisciplinary approach analyzes security from every angle to mitigate corporate risk.
A Security Survey comprises a thorough physical examination of a facility and its operations with regards to personnel, and corporate assets. The survey examines the risks associated with the assets, and reviews the existing measures to protect the assets and mitigate liability. The survey identifies existing vulnerabilities and recommends corrective action.
A Security Audit assesses whether existing security systems, plans, protocols and procedures are performing the function for which they were initially created. Moreover, the audit evaluates the administration of the systems; the operational effectiveness of the plans, procedures and protocols; security awareness of employees; management oversight; and relevant government compliance. The final result of the audit will uncover where the weaknesses are, and what are the issues behind any internal non-compliance, and then recommend a balanced and effective security risk management program.
FDC is the world’s leading provider of major event security plans ranging from both summer and winter Olympic Games, world concert tours and municipal festivals, to corporate shareholder meetings, director’s meetings, and private corporate events.
FDC and the experience of its Subject Matter Experts includes the coordination, planning, exercising, and implementation of security planning for international events ranging from the London 2012 Summer Olympics, 2012 Honda Toronto Indy, 2010 G20 Toronto Summit, 2007-2015 City of Toronto ScotiaBank Nuit Blanche Festival, 2007-2013 MuchMusic Video Awards, Atlanta 1996 Summer Olympic Games, and the Calgary 1988 Winter Olympic Games.
In every case, the mission was to develop a seamless event security plan that not only creates a safe and secure environment for the general public and event participants, but also provides protection to any special guests and dignitaries, and addresses intelligence, counter terrorism, hostage rescue, investigations and recovery management planning, and overall coordination of public and private resources.
Business Continuity Planning addresses how a business survives the initial and post stages of any major incident which would disrupt the day-to-day operations of any business.
There are two parts to any business continuity plan.
The Continuity of Corporation plan means a coordinated effort within a corporation’s executive branch to ensure that the executive management functions continue to be performed during a catastrophic emergency.
Secondly, a Continuity of Operations plan ensures that primary operational functions of the company continue to be performed during a wide range of emergencies, including localized acts of nature, accidents, and technological or attack-related emergencies.
The comprehensive methodology used to create the full business continuity plan consists of three stages: Business Risk Analysis and Business Impact Analysis; Response Strategy and Recovery Plan; and Testing and Training.
Crisis Management, Response & Communication Plans are created to accurately reflect corporate crisis management policies and serve as the focal point of a complete crisis management program.
A properly developed plan will ensure that a corporation has a strategic and structured response to handle any incident efficiently and effectively whether that be a complete systems failure; kidnap and ransom; terrorist incident; live bomb threat; active shooter; fire, explosion or hazmat incident; natural disaster; political and civil unrest; pandemic epidemics; power disruptions; or natural disaster, and then communicate incident information to employees, customers and the media.
An Emergency Response Plan will facilitate the organization of employers and employees during a specific incident in terms of their response and documentation during workplace emergencies of any type.
The plans will also identify decision authorities, as well as specific protocols for managing any possible scenario, coordination of security and business recovery efforts; and communication practices. Strategically developed emergency plans and proper employee training (such that employees understand their roles and responsibilities within the plan) will result in fewer and less severe employee injuries and less structural damage to the facility during emergencies.
The Emergency Response Plans are designed to be functional and realistic and can help employers plan for the emergencies their businesses are most likely to encounter such as workplace fires, hazardous chemical releases, floods, explosions and power outages.
Emergency planning is only one part of a successful equation, the other side training exercises to test the preparedness of a corporation.
FDC’s Subject Matter Experts have led numerous field exercises for corporations and government including the U.S. Department of Homeland Security’s TOPOFF 1, 2 and 3 exercises.
Training includes all levels of management and staff, and follows a uniform approach to all possible incidents so that the processes and procedures are scalable, consistent and repetitive. Although there are procedural nuances to every specific type of incident, this step and repeat approach ensures continuity between all incidents.
As the vast majority of FDC’s Subject Matter Experts have spent their careers in the field responding to critical incidents, or conducting emergency drills and tests, FDC is in the unique position of being able to provide timely on-the-ground support and HUMINT to any incident occurring anywhere in the world, such as natural disasters, business interruptions, terrorist activity, political unrest or other major crisis. FDC’s network of operatives can provide immediate crisis management and emergency response support to any organization internationally. Moreover, FDC’s operatives have themselves a vast network of government law enforcement and military relationships to ensure that any incident becomes a priority for first responders.
FDC’s Joint CommCenter was established as a secure 24/7 emergency communications center for use by FDC’s clients. FDC manages emergency communications, and relays and coordinates first responders and or the military across the globe as it relates to real time incidents occurring at FDC’s clients’ facilities. FDC’s Joint CommCenter also transmits critical incident information to other approved corporate management within an organization who may be not be at the facility in question, but need to be aware of the incident.
Red Team exercises are designed to challenge a company’s physical security detection, intrusion and protection systems and methodologies in an effort to improve their effectiveness.
Conducted properly, red team exercises and physical penetration tests can clearly identify the potential damage to an organization that a determined, directed attacker could accomplish, and the associated security vulnerabilities that exist. Moreover, however, the tests will serve as a real life tool to train corporate security on identifying indicators of an active attack.
FDC has strategically located its Forward Operating Stationd in cities that are amongst the most dangerous in the world, and where kidnappings are a common occurrence, as follows:
United States - Detroit, Michigan
Guatemala – Guatemala City
Mexico – Mexico City
Brazil – Rio de Janeiro
Columbia – Bogota
Venezuela – Caracas
Great Britain – London
Russia – Moscow
Ukraine – Kiev
Egypt – Cairo
South Africa – Cape Town
Kenya - Nairobi
Nigeria – Port Harcourt
Iraq – Bagdad
Lebanon – Beirut
Bangladesh – Dhaka
India – Delhi
Nepal – Kathmandu
Pakistan – Karachi
South Eastern Asia
Malaysia – Kuala Lumpur
Philippines – Manila
Thailand - Bangkok
UTC Time: UTC-5:00
Zone Description: Eastern Standard Time
Brookfield Place, TD Canada Trust Bank Tower
27th Floor, 161 Bay Street
Tower P.O. Box #508
Toronto, Ontario, M5J 2S1