State Government Headquarters Analyzes Security Gaps with a 360-View

 

Challenge

A State Department of Revenue and entry points while providing several public-facing services. They needed to strengthen access control and find ways to efficiently share threat information. Understanding the different profiles of threat actors was also crucial to the client’s safety and security program.

Strategy

To address this location’s vulnerabilities, the client partnered with Rozin Security to conduct a complete Security Risk Assessment (SRA). The SRA considers the client’s unique operations, assets, threats, and vulnerabilities. Rozin Security uses the assessment findings to develop customized solutions that are prioritized, efficient, proven, and cost-effective. Below are some core elements that went into the plan:

Comprehensive Asset Analysis — Rozin Security’s first task was to understand the building’s operations thoroughly. This includes access to sensitive information, including receiving and processing taxes and tax information, as well as the storage of sensitive financial data, tax stamps, and evidence related to potential financial crimes.

Identify Peripheral Operations—Several events, such as administrative court hearings, periodic large meetings and events hosted by the governor, and even a publicly accessible ground-level cafeteria, brought in large groups of people.

Identification of Principal Assets—Rozin Security and the client identified specific assets that should be protected. These included the staff and patrons, tax information and criminal evidence, the data center, and other infrastructure systems essential to the Department of Revenue’s operations and reputation.

Creation of a Tailored Threat Profile — Rozin Security conducted a comprehensive threat profile analysis for the client, identifying unique, criminal, and ideologically motivated threat actors relevant to government entities and revenue targets. The assessment included a review of past security incidents at the property and surrounding areas. Rozin Security developed a tailored threat profile by focusing on the client’s assets and operational factors that could attract malicious activity.

In addition to the client’s comprehensive onsite assessment of property, operations, and assets, the client received training to demonstrate how deficiencies within the site’s security operations may be exploited to target 1) executive staff members and 2) critical tax documents and information. This involved conducting multiple Red Team assessments. RSC can simulate threat actors ranging from corporate espionage to low-level criminals, from terrorists and other violent events.

To address identified vulnerabilities and risks, Rozin Security traditionally divides its solutions into three broad categories:

1. Physical security features (exp., hardened doors and window safety features).
2. Technological security features (exp., access control mechanisms and video surveillance systems).
3. Human asset security features (exp., increased security personnel presence, access control procedures, and threat information sharing).

Rozin Security considered these categories at every layer of the client’s property and operations – from exterior and public-facing zones to interior and restricted storage and operational spaces.