Addressing Mailroom Security Complacency

Published

Addressing Mailroom Security ComplacencyTo assess how organizations are protecting themselves from mail terrorism, SoBran, Inc. conducts an annual survey of security and mailroom professionals.

Click here to view the Survey Infographic.

Why Is This Important?
Mail threats can occur at any time, for any type of organization. They may come from terrorist actions, homegrown extremists, or individuals with a grievance against a particular company

Mail screening is an essential part of an overall security plan that includes physical security and cyber security strategies to protect an organization’s staff, assets and reputation. Yet, many security professionals battle complacency in their organizations and haven’t implemented adequate protection from mail threats.

These survey findings reveal how organizations can move from complacency to funding mail screening as a critical component of their overall security plan. Understanding how organizations included in this survey address mail security challenges can help security professionals, facilities managers, mailroom staff, and business leaders shape their own risk management practices.

How Worried Should We Be?
Each year, the FBI and US Postal Service receive thousands of reports of hazardous or threatening mail. High profile or controversial organizations are not the only ones targeted by mail terrorism.

Almost one in three respondents in the SafeMail survey report that over the last year they have received at least one mail threat (including hazardous mail and hoaxes). Thirteen percent received 3 or more threats

What are the Challenges to Mail Security?
When asked to name their biggest challenge, 38% of survey respondents indicated they must constantly work to gain awareness and/or budget for mail security, combating the complacency that can set in when organizations feel “too safe.”

As the results of this survey indicate, even organizations that are aware of the threat of mail terrorism and have taken steps to address it, have gaps in their security strategies which could leave them exposed to an attack

Where Can We Improve?
The primary area for improvement is the screening location. Offsite screening, in which mail is screened in a separate location from where most employees work, is the most effective way to minimize potential harm.

A second opportunity for improvement is a deeper emphasis on training.
Organizations can increase the knowledge of mailroom staff as well as anyone who
handles incoming mail with a variety of training strategies.

Basic steps to Mail Safety Include:
1. Put a plan in writing
2. Install correct equipment
3. Train employees
4. Run practice drills

If this is not possible, consider outsourcing mail screening to a third party or sending mail to a third party screening facility.

As long as terrorists have low cost and easy access to mail, all organizations must consider comprehensive mail screening an essential part of a complete security program. For more information on mail security best practices, SoBran can help.

All this information, and much more is included in the complete survey brief: “Addressing Complacency: Lessons from the 2017 SoBran Mail Security Survey.”

 

Why Radiological Threats are Attractive to Terrorists

Published

The radiological threat is real and growing according to the April Time Magazine article titled “Inside the Uranium Underworld: Dark Secrets, Dirty Bombs.

"It would change our world," President Obama said of a potential dirty bomb in April 2016. "We cannot be complacent." - TIME INC

"In a sense we've been lucky so far, I honestly think it is only a matter of time before we see one of these dirty-bomb attacks." Sharon Squassoni, Director of the Proliferation Prevention Program at the Center for Strategic and International Studies (CSIS) – TIME INC.

Last fall, an undercover investigative group demonstrated how simple it was to obtain radiological materials for a dirty bomb – right here in the United States.

This spring, in response to the growing radiological threat, ambulances in our Nation’s Capital were fitted with radiological detection equipment. Larger devices of this sort have been put into operation at our nation’s ports just this past year. The goal here being early detection before the harmful radioactivity can be put to use in any act of terror – whether at a crowded event, on a city block or in the mail of a targeted organization.

What is a Radiological Mail Threat?
The Department of Homeland Security defines a radiological attack as “the spreading of radioactive material with the intent to do harm.” This can include an explosion of some kind and the resulting unprotected exposure to radioactive material. According to the United States Postal Inspection Service, radiological dispersion can be achieved “by combining a radiation source with a conventional explosive to create a ‘dirty bomb’ that can be introduced into the mail stream as a package.”

Why are Radiological Threats be Appealing to Terrorists?
Terrorist use of a Radiological Dispersion Device (RDD) — or “dirty bomb” — is considered far more likely than use of a nuclear explosive device. This appeals to terrorists because the RDDs require less technical knowledge to build and deploy compared to a nuclear device. Furthermore, the radioactive materials in RDDs are widely used in agriculture, medicine, industry and research, and are easier to obtain than weapons grade uranium or plutonium.

What is Different About This Threat?
By itself, radiation is odorless and invisible, and there are few clues about the danger.

However, in some ways, the threat is very much like a bomb (or explosive) threat due to the fact that in order to disperse the radiation, a conventional explosive device (or Radiological Dispersion Device RDD) is needed.

The difference lies in the fact that there is radioactive material being scattered. And therefore, additional detection methods apply here.

Radiological threats by explosion may affect:
• Small, localized areas (e.g., a street, a mail room, a single building, or city block)
• Large areas, up to a few square miles, depending on the nature of the dispersion and the amount and type of radioactive material

What are the Types of Radiological Threats?
Radioactive sources can be solid, aerosol, gas, or liquid.
Radiological Dispersal Devices (RDDs) or ‘Dirty Bombs’ explosion produces radioactive and nonradioactive shrapnel and radioactive dust over a targeted area.

Explosion causes:

  • Radiation contamination, commonly
  • Radiation exposure only in certain circumstances
  • Physical injury
  • Burns
  • Panic, fear

RDDs can also include other means of dispersal, including placement of a container containing radioactive material to disperse powdered or aerosolized forms.

What Should We Look for?
In addition to Signs of Dangerous Mail which can help an organization identify possible dangers, radiological threats will need the help of specialized equipment to detect radiation hidden in a mail package.

There are different types of radioactive materials that emit different kinds of radiation:

Gamma and X-rays can travel long distances in air and can pass through the body exposing internal organs; it is also a concern if gamma emitting material is ingested or inhaled.

Beta radiation can travel a few yards in the air and in sufficient quantities might cause skin damage; beta-emitting material is an internal hazard if ingested or inhaled.

Alpha radiation travels only an inch or two in the air and cannot even penetrate skin; alpha-emitting material is a hazard if it is ingested or inhaled.

Do We Have the Correct Equipment for Protection?
A radiological mail threat can be detected with equipment which measures dose rate such as a Geiger counters. Systems to detect radiation in mail operations are capable of detecting and identifying differing types of radiation particles mentioned above (i.e. alpha, beta, and gama). Other types of instruments are used to identify the radioactive element(s) present.

Organizations can set up their own screening equipment at their own location. When cost of equipment and training is a factor, mail can be screened at a 3rd party offsite screening facility. With these “offsite mail screening” facilities, you have no capital costs and pay a monthly fee that is typically based on the volume of mail screened. (For the record, SoBran operates several of these facilities.)

-
How Can We Ensure Protection?
Best practices include:

1. Screening inbound delivery vehicles for radiation using pedestal or wall mounted sensors.

2. Integrating radiation sensors into the central security system - monitoring 24/7.

3. Equipping mail center personnel with wearable radiation pagers while screening and processing mail or unloading delivery vehicles in the loading dock area.

Basic steps to Radiological Mail Safety include:

1. Put a plan in writing

2. Install correct sensor equipment

3. Train employees

4. Run practice drills

If this is not possible, consider outsourcing mail screening to a third party or sending mail to a third party screening facility.
Stay vigilant and next time we will cover the threat of explosives and letter bombs. As always, I appreciate your comments. smartin@sobran-inc.com

Chemical Mail Threats – What You Need to Know

Published

Last month we took a look at the biological mail threats. This month I turned to the mail security experts at SoBran to talk about chemical threats.

What is a Chemical Mail Threat?

The Department of Homeland Security defines a chemical attack as “the spreading of toxic chemicals with the intent to do harm.” In the mail, chemical gas, solids or liquid agents are sent to an intended target individual or company. The threat is usually contained while the package or letter is being processed, and then could be released from the act of opening by the recipient, or by a timer or a remote.

What is Different About This Threat?

Since chemical threats are often contained until the delivery is opened, they are difficult to detect. The small size and light weight means they can be deployed using almost any national or local delivery service. This also presents unique challenges for trying to identify their presence in your organization’s mail and deliveries.

Furthermore, with a very modest amount of material, the chemical agent can cause significant and immediate casualties in a building.

What are the Types of Chemical Threats?
A diverse range of chemicals can be formulated, stolen or otherwise procured for use with malicious intent.

These chemical threat agents can be poisonous vapors, aerosols, liquids or solids that are either naturally occurring in the environment or synthetically produced.  General categories include:

  • Nerve agents (i.e. Sarin)
  • Blood agents (i.e. Cyanide)
  • Pulmonary (choking) agents (i.e. Ammonia, Chlorine)
  • Blister agents (i.e. Mustard)
  • Toxic Industrial chemicals (i.e. Chlorine and Phosgene)

What Should We Look for?
Because of the very small quantity of agent needed for a chemical threat, detection is problematic.
In addition to knowing the general Signs of Dangerous Mail - many chemical agents can have a unique odor and color. Be alert for:

• Unexplained odors (smell of bitter almonds, peach kernels, newly mown hay, or green grass)
• Droplets of oily film on surfaces
• Unusual liquid or vapors

Do We Have the Correct Equipment for Detection?
Most organizations employ X-ray screening, but X-rays are effective for visible threats, like explosives. Chemical, biological, radiological and nuclear threats all require specialized equipment and training. Needed screening equipment includes an air sampling chemical sensing system – both automatic and handheld.

Organizations can set up their own screening equipment at their own location. When cost of equipment and training is a factor, mail can be screened at a 3rd party offsite screening facility. With these “offsite mail screening” facilities, you have no capital costs and pay a monthly fee that is typically based on the volume of mail screened. (For the record, SoBran operates several of these facilities.)

How Can We Ensure Protection?
Your mail screening facility should have chemical detection sensors installed in the loading dock area and the mail screening area. These sensors should provide both an audible and visual alarm that can be detected in the immediate area.

You can safeguard your people and your assets against the chemical exposure threat. Advance preparation is essential to assessing and managing a chemical threat that may come in the mail.  As always, early detection and accurate identification are critical to enable effective treatment and to prevent additional exposures of chemical threats.  Every mailroom should have a solid understanding of the chemical threats risk, and a written security plan on how to respond.

Basic steps to Chemical Mail Safety include:

1. Put a plan in writing
2. Install correct sensor equipment
3. Train employees
4. Run practice drills

If this is not possible, consider outsourcing mail screening to a third party or sending mail to a third party screening facility.

Stay vigilant and next time we will cover radiological threats. As always, I appreciate your comments. smartin@sobran-inc.com

Biological Attack by Terrorists Increasingly Likely

Published

“A biological attack by terrorists that could kill up to 30 million people is increasingly likely due to the ease with which pathogens can be created and spread, Bill Gates has warned.”

In light of the latest headlines about the intensified biological threat, we think it is important to understand the threat and how to protect your organization.

What is a Biological Mail Threat?
The Department of Homeland Security defines a biological threat as “the intentional release of a pathogen (disease causing agent) or biotoxin (poisonous substance produced by a living organism) against humans, plants, or animals. An attack against people could be used to cause illness, death, fear, societal disruption, and economic damage.”

The DHS makes a distinction between the two types of biological threats:
• Transmissible agents that spread from person to person (e.g., smallpox, Ebola) or animal to animal (e.g., foot and mouth disease).
• Agents that may cause adverse effects in exposed individuals but that do not make those individuals contagious to others (e.g., anthrax, botulinum toxin).

What is Different About this Threat?
There is an important difference between biological threats and the other types of mail threats. Mail bombs and chemical and radiological attacks are often more easily identified, and typically consequences can and must be managed immediately.

Because of the minuscule size and amount needed of the biological agents, this threat is not as immediately recognizable - which means consequence management could be delayed enabling contamination to travel and spread.

As we learned with the 2001 anthrax letters, large quantities of weaponized spores can be distributed using one envelope. Utilizing a more sophisticated ‘bomb,’ they can also be disbursed through an aerosol method from an enclosed flat envelope or parcel.

What are the Types of Biological Threats?
Bacteria (i.e. Anthrax, Plague and Smallpox)
Viruses (i.e. Smallpox or Ebola)
Biotoxins (i.e. Ricin or Botulism)

See the full CDC list here

What Should We Look For?
Most often fine powder is the only visual clue. However, a dangerous agent like Anthrax is almost imperceptible since so little is needed to spread both fear and sickness.

Furthermore, in many cases the powder is a result of the mail handling process itself. Few individuals realize the level of automation involved in the mail process that causes some substances that are solid when mailed to become powders by the sorting equipment used at postal facilities.
Even though the majority of these type of mail threats turn out to be either the result of mail processing or attempted hoaxes, the threat of bioterrorism is more real now than ever. Each suspicious package or letter has to be treated seriously.

Do We Have the Correct Equipment for Detection?
Most organizations have X-ray screening, but X-rays are primarily used for explosives. Like chemical, radiological and nuclear threats, biological agents require specialized equipment and training.

Organizations can set up their own screening equipment, or can cost-effectively have their mail screened at a 3rd party offsite screening facility. Needed screening equipment includes Bio-collection devices and BioFlash detection air sampling units.

How Can We Ensure Protection?
Effective countermeasures are available against many of the bacteria, viruses, and toxins. Advance preparation is critical to assessing and managing any biological threat that may come in the mail.
Every mailroom should have a solid understanding of possible biological threats, and a written security plan on how to respond. Basic steps to Biological Mail Safety include:

Taking action:
1. Put a plan in writing
2. Install correct equipment
3. Train employees
4. Run practice drills

If this is not possible, consider outsourcing mail screening to experts or sending mail to a third party facility.

Next time we will cover chemical threats. I’d like to hear your comments. smartin@sobran-inc.com

Stay Safe,

Soma K. Martin and your SoBran SafeMail Team

 

The Opioid Crisis Spotlights Mail Security Deficits

Published

The opioid crisis has highlighted a major security issue for mailrooms nationwide. Packages are pouring in from unknown international sources, and often contain dangerous and illegal substances.

Read more

Are You at High Risk for Mail Terrorism?

Published

A variety of factors, both internal and external, can help determine the vulnerability of your workplace.

 

Answering "yes" to any of these questions puts your business in the high risk category:

  • Has your organization appeared in the media?
  • Has your organization been engaged in a lawsuit?
  • Has your organization been threatened with a lawsuit?
  • Has your organization made public statements on sensitive issues?
  • Is your organization a member of an industry whose services, research or products could be the subject of public controversy?
  • Has your organization experienced a recent reorganization or buy-out requiring layoffs?
  • Has an employee made threats to harm the company or any other employee?
  • Has your organization attracted political or potentially controversial attention?
  • Has your organization done business internationally?

 

If your business is High Risk - view our infographic to see how offsite mail screening can better project your employees and your assets.

Benchmark Your Mail Security

Published
Click to enlarge

Click to enlarge

We recently surveyed the industry about their mail security. The results were surprising - see if you agree.

See the Results

Why SoBran’s SafeMail DC is Your Best Insurance

Published

SafeMail DC brochure image updatedSafeMail DC is SoBran's premier mail screening in the Washington DC area, providing business continuity to companies and government agencies in the region.  By having experts screen mail at a separate facility, these organizations protect themselves from threats that would otherwise be delivered to their own building.

Learn how to protect your employees and keep your business running.

Mail Terrorism – Are You Prepared?

Published

How prepared are you?

How ready are your personnel and facilities for an increase in terrorism? Read the full 2016 Survey to benchmark your preparedness.

Read more

Increasing Threat – Homegrown Terrorism

Published

boulder"This trend of homegrown terrorists is likely to continue as ISIS makes use of aggressive messaging and social media efforts to attract followers to itself or other Islamist terrorist groups."

Read more