Ron Rumberg Regional Vice President December 2016msconsulting.net.pl ›...

Ron RumbergRegional Vice President

December 2016

Qognify

Introduction

Formerly NICE Security, now a private company owned by Battery Ventures

Headquarters in New JerseyOffices in London, Singapore, India and Israel

Customers in over 120 countries worldwide

Ranked as top situation management\PSIM vendor consecutively; best VMS system 2016 (VisionHub)

Qognify

Unleashing the power of data to protect and optimize people, assets and organizations

Our Mission

Mission critical operations

VERY HIGH COST OF BUSINESS DISRUPTION

LARGE ARRAY OF SENSORS AND DATA INPUTS

TIGHT REGULATORY/COMPLIANCE REQUIREMENTS

TIGHT INTEGRATION OF SECURITY AND OPERATIONS APPLICATIONS

Airports Utilities(water, power, etc.) Financial Institutions

Global Enterprises Public Transport Smart and Safe Cities

Addressing our customers’ challenges

MITIGATERISK

MAINTAINBUSINESS

CONTINUITYSTREAMLINEOPERATIONS

Addressing a variety of challengesIm

pac

t

ProbabilityX 1000X 10,000X100X

Routine Procedures

Anomaly / Failure

Incident

Crisis

Solutions mapping

• Video

• Static UI

• Alerts

• Two-way security

integrations

• Map based visualization

• Customizable UX

• Operations systems and

sensors

• Enterprise GIS

• Holistic view across

the organization

• Video Alerts

• To do list

• Workflows

• Collaboration

• Advanced

workflows

• Communication

• Actionable

intelligence

SITUATION MANAGEMENT

SITUATIONAL AWARENESS

VMS

OIC

VisionHub

Situator

How to improve electrical utilities actionable intelligence

Ron Rumberg

Act of Terrorism

Major Accident

Electrical utilities situations spectrumIm

pac

t

X 1000X 10,000X100X

Visitors sign in

Remote site gate opening

Unauthorized Attempts

Copper Theft

Medical Emergency

Fire with casualties

Power Outages

EFFECTIVENESS X EFFICIENCY X (FULL SITUATION SPECTRUM)

ACTIONABLE INTELLIGENCE

=

Doing the right things Doing things right

Situational Awareness Situation Management

Insights Errors

Where’s it happening

OPERATOR - SITUATIONAL AWARENESS & BEST PRACTICE DRIVEN RESPONSE

Share live stream?

YES NO

FIELD PERSONNEL – SITUATIONAL AWARENESS & BEST PRACTICE DRIVEN RESPONSE

SUPERVISOR - SNAPSHOT OF CURRENT STATUS ACROSS THE ORGANIZATION

Supervisor – Live Dashboard

Facilities Status 67 Active Incidents 89% Operational

Quality of Service

Sub- Stations

Issue Monitoring

High Severity Incidents

Incident SLA missed

Dispatches Today

15

3 today

19

Zone 1

Zone 2

Zone 3

100% Operational

2 High Severity

70% Operational

Weather

Dam flooding Alerts

Maintenance work orders beyond SLA

Mild in zone 2

All Clear

8

Power Plants

Active Plants incidents

Number of Plants reporting “70% capacity”

44

3

Supervisor - Real Time Dashboard

Supervisor – Current Status

Control Room Operators

Field Personnel

1616

CxO - MONITORING BUSINESS AND SERVICE KPI

CxO- KPI Monitoring

CxO- KPI Monitoring

Schedule a comparison reminder

Set Cancel

Set a time for comparison:

Description:

In six months

In a year

In a year & a half

In 2 years

INCIDENT MANAGEMENT -TRACK RECORD AND ROI

Handling the complete incident lifecycle

Situational AwarenessLeading Indicators

Investigation \Learning

Situation Management

Time

Leading Indicators Situational Awareness

Situational Management

Reporting/ Monitoring

LEADING INDICATORS



REPORTING/ MONITORING

“FILTERING FALSE ALARMS AND FOCUSING ON THE IMPORTANT INFORMATION GIVES US REAL TIME SITUATIONAL AWARENESS.”

“SITUATOR SIGNIFICANTLY REDUCED COSTS INCURRED FROM FALSE ALARMS.”

LEADING INDICATORS




Jon Denial -Executive Director, JPMorgan Chase

Mr. Vitor Monteiro -Millennium Security Manager

Manual Tasks

Text & Phone

Paper handbooks and scenarios

LEADING INDICATORS




LEADING INDICATORS




Remote-Independent-Site (RIS)



Monitoring & Reporting

1. Decipher code

2. Find relevant procedure manual

3. Identify the location

4. Identify which CCTV camera covers the location

5. Which security personnel is on duty

6. Guide field personnel to the location

7. Brief personnel on the incident

8. Get updates on the incident

9. File an incident report

ACS Violation Handling Time with Legacy System

20 minutes





ACS Violation Handling Time with Qognify – 5 Minutes

1

2

3

4

5

1. Access Point door contact sensor alert with pre-defined message

2. The relevant GIS map pops-up and the relevant perimeter intrusion procedure is deployed

3. A rule commands a nearby camera to point toward the door sensor and display the monitored and pre-recorded video

4. The system locates and sends task assignments to people best equipped to respond. Using mobile devices, the procedure asks responders: “Evidence of tampering?”

5. If a responder answers “Yes” the system activates unauthorized access attempt procedure, activates mass notification system…


Reduced incident response time from 20 to 5 minutes, a 75% reduction.Grew from managing 14 sites to 350 sites, without increasing control room personnel




LEADING INDICATORS




NERC-CIP: Door Forced at Springfield Substation

Close incident and generate report

Computer Theft \ Robbery

Water Dam Level Critical

SUMMARY

The Value of Actionable Intelligence

1

Data Collection for Analysis

Data Anlysis Decision Made Alarm Field Personnel

Action Taken

2 3 4 5Manual

Handling

XIncident

Handling Time

1

Data Collection + Data Analysis

Decision Made Alarm Field Personnel

Action Taken

2 3 4 5Business

Intelligence

Actionable Intelligence

Data Collection Data AnalysisDecision MadeAlarm Field Personnel

1 2 4

Action Taken

3

0.6X0.4X

5

$$$$

$$$

$$

$

Business Value

Business Value and Response Time

Time(Minutes)X0.6X0.4X

THANK YOU

Ron Rumberg Regional Vice President December 2016msconsulting.net.pl ›...

Documents

Transcript of Ron Rumberg Regional Vice President December 2016msconsulting.net.pl ›...