Are you protecting your assets from the right threats? How do you know your physical protection system will work when it’s needed? How do you prove it? Most organizations install security measures one component at a time, and they test as they go along. Install video cameras… Do they work like they’re supposed to? Check. Install lighting… Does it work? Check. Install fence… Was it installed according to contract specifications? Check.

All the components make up a physical protection system (PPS), and it’s the job of the PPS to protect the site. Because they don’t normally think of a collection of security technology, barriers, policies, procedures, and people as a single discrete system, they never test it as a single system.

A PPS is a lot like a piano. You cannot tell if a piano is in tune by looking at it – you have to play it. Scenario-based testing is how you tune your physical protection system. Ross can help you build an organic team within your organization that will build strength and resilience across all your assets.

Of all critical infrastructure sectors, electricity is the most important. Without electricity, we cannot maintain the essentials of life. Each aspect of the grid - generation, transmission, distribution, and control – has unique security concerns. Ross has experience in all areas of the grid, and has worked with Canadian and US regulators, NERC, trade associations, and vendors.

Recognized for his experience, Ross is the Chair of the E-ISAC’s Physical Security Advisory Group and is on the planning team for GridEx VIII.

Ross worked as a safety and security supervisor in the offshore oil industry back from 2003 to 2006. During that time, he gained a lot of experience using safety management programs. Recognizing that the safety and security worlds seek the same thing – the prevention of unwanted incidents – Ross has pioneered the use of security management programs in the electricity sector.

The use of security management programs ensures that assets receive the security protection that they need, that resources are governed properly, incidents are responded to appropriately and relevant lessons learned to prevent reoccurrence, and that changes are managed properly. We use security management systems for the same good reasons that we use safety management systems.