On the evening of December 15, 2013, Dustin and Jamie Friedland returned to their Range Rover on the third level of a parking deck at The Mall at Short Hills (Short Hills Mall). It was shortly after 9:00 p.m., ten days before Christmas.

Dustin opened the passenger door for his wife, then walked around the rear of the vehicle. Two men approached, and a struggle ensued. Dustin was struck with a handgun and shot in the head. Jamie was forced from the vehicle at gunpoint. The attackers fled in the Range Rover, following their accomplices out of the garage in a GMC Suburban. Dustin Friedland was pronounced dead at the hospital. He was 30 years old. (New Jersey Courts)

The four men responsible were ultimately convicted or pleaded guilty. Their criminal responsibility is clear: they went to the mall intending to steal a vehicle, selected a target, brought a firearm, attacked an innocent couple, and murdered Dustin Friedland.

Nothing in a security analysis should dilute that responsibility. Yet protecting people from foreseeable threats is precisely what security is supposed to do. The Short Hills Mall attack raises a second, unavoidable question: how were armed criminals able to search one of the country’s most prestigious shopping-center parking areas, return after an earlier visit, and leave a trail of warning signs without being stopped?

That question matters far beyond the Short Hills Mall. It applies to every mall, office complex, hospital, residential tower, and commercial property that treats its parking garage as secondary infrastructure rather than a critical part of the security environment.

This Was Not a Random Encounter

The offenders did not arrive, unexpectedly see a Range Rover and make an impulsive decision. Court records show that they traveled to the property intending to steal a vehicle. The December 15 attack was not their first visit.

Three days earlier, a Millburn police sergeant observed the same two-tone GMC Suburban driving suspiciously through the mall parking lot and ran its plate. Surveillance footage later showed the Suburban following a white Range Rover from the property onto the highway. E-ZPass records placed it immediately behind that vehicle on the New Jersey Turnpike. Basim Henry later admitted that he and Hanif Thompson had gone to the mall to steal a vehicle. (New Jersey Courts)

On December 15, the group returned. Surveillance footage showed the Suburban moving through the property, waiting and searching until its occupants found the vehicle they wanted. After the shooting, the camera system recorded the Suburban and the stolen Range Rover leaving the garage at high speed. (ABC News)

This was a planned predatory operation conducted within the mall’s parking area. The offenders used that environment to search, observe, wait, approach, and escape. Their conduct unfolded over time, creating opportunities for detection and intervention.

What Went Wrong?

1. The Threat Should Have Been Understood

Four months before the murder, the Essex County Prosecutor, U.S. Attorney, Essex County Sheriff, and Newark police announced a joint campaign to address a sharp regional increase in carjackings. The Essex County Prosecutor’s Office reported that annual carjackings in the county had risen from slightly more than 200 in 2009 to more than 400. Officials also noted that these crimes often occurred at night and involved high-end vehicles.

The Mall at Short Hills was not an ordinary retail property. It drew affluent shoppers, luxury purchases and a concentration of expensive vehicles, with quick access to major highways. That did not make murder inevitable, but it made vehicle theft, robbery and carjacking clearly relevant to security planning.

Jamie Friedland’s wrongful-death complaint also alleged earlier robberies and carjacking incidents involving mall patrons, including a 2006 gunpoint carjacking and a 2009 robbery and attempted carjacking. The complaint further alleged that the mall had stopped hiring police officers for security due to cost concerns. Those were allegations, and the defendants disputed that the mall’s security posture caused the attack.

The broader question remains: was the security program calibrated to the actual threat environment or to a more comfortable perception of the property? Luxury properties can become victims of their own image. Prestige does not insulate a site from crime; sometimes it attracts offenders seeking valuable targets.

2. Surveillance Recorded the Threat but Did Not Disrupt It

The mall had cameras, and the recording from those cameras was extremely valuable after the murder. Investigators used them to identify the Suburban, reconstruct the offenders’ movements, and establish their earlier activity at the property. Within an hour, investigators were reviewing footage and issuing alerts. (New Jersey Courts)

The system helped solve the crime, but it did not help deter or prevent it.

That distinction remains one of the most misunderstood issues in physical security. A passive recording system may produce excellent forensic evidence while providing little real-time protective value. If no one is actively watching, if operators are overloaded, if suspicious behavior has not been defined, or if there is no rapid dispatch process, the system may simply document an attack.

The Short Hills Mall footage reportedly showed the offenders driving slowly through parking areas, lingering near potential targets, changing locations, returning on different days, and following selected vehicles. Cameras are sensors. They are not, by themselves, a security program.

3. The Garage Appears to Have Been Treated as Secondary Infrastructure

Shopping centers devote enormous attention to the interior customer experience. Entrances are polished, stores are brightly lit, and activity is highly visible. Then customers walk into the parking garage, where the environment changes immediately.

Garages contain columns, ramps, elevation changes, stairwells, blind corners, parked vehicles and inconsistent sightlines. Pedestrians and vehicles share confined space. Customers may be distracted by packages, keys, children or phones. A person sitting in a vehicle may not initially appear suspicious. These are predictable features of the environment, not surprises.

The Friedlands’ customer journey did not end at the mall door. The property invited them to shop and provided the garage through which they had to leave. From a risk-management perspective, the garage was part of the mall.

Yet parking facilities are still often treated as operational necessities rather than critical security zones. Officers focus on shoplifting and disorder inside. Exterior patrols may be intermittent or predictable. Camera coverage may exist, but operators focus on entrances rather than on behavior between vehicles. Management counts cameras and officers without establishing detailed requirements or testing their effectiveness.

4. Suspicious Activity Did Not Become Actionable Intelligence

The December 12 observation may be the most uncomfortable part of the case. A police sergeant observed the Suburban moving suspiciously through the parking area and ran its plate. It would be unfair to suggest that the officer should have predicted a murder three days later. Suspicious driving does not automatically establish probable cause for a stop or arrest.

But what happened to the information? Was it documented in a searchable format? Was mall security notified? Did the property maintain a suspicious-vehicle log? Were subsequent shifts briefed? Could operators retrieve the vehicle’s earlier movements? Was there a process to connect police observations, security reports, and video?

Security organizations often collect information without turning it into intelligence. An officer notices something. A dispatcher records it. A guard writes a report. A camera captures the vehicle. Each fact remains isolated. No one assembles the pieces.

Effective protective intelligence at the property level does not require a national command center. It begins with disciplined reporting, video preservation, tracking suspicious vehicles, police coordination, and shift-to-shift briefings. The objective is not to treat every unfamiliar car as a threat. It is to recognize patterns before they end in violence.

5. Deterrence and Intervention Were Not Credible Enough

The offenders searched the property, returned after an earlier visit, moved through the garage, waited for targets, committed the attack, and fled in two vehicles. That behavior suggests they did not perceive a meaningful likelihood of intervention.

Security presence is not measured solely by staffing numbers. It is measured by what an offender can observe: visible yet unpredictable patrols, officers moving through every level, challenges to unusual behavior, coordinated closing-period coverage, active monitoring, and the ability to converge quickly on a specific location.

No reasonable program can promise to stop every determined offender. But offenders make decisions about risk. Surveillance, patrol, and intervention should be credible enough to increase the perceived likelihood of detection before an attack begins.

6. Emergency Access Should Have Been Resolved Before the Crisis

The wrongful-death complaint stated the ambulance was too large to enter the parking deck, forcing responders to carry Dustin on a stretcher up the ramp and bring him back down. Millburn’s police chief disputed the claim that assistance was delayed, noting a crew chief arrived within ten minutes, the first ambulance within fourteen, and Dustin was in it by 9:31 p.m. (CBS News)

It would be inappropriate to claim that a different ambulance configuration would have changed the outcome of a catastrophic gunshot wound. However, emergency-access limitations should never be discovered during an actual shooting.

Garages pose predictable response challenges: height restrictions, narrow ramps, confusing level designations, radio dead zones and limited staging space. Police, fire, EMS and property personnel should know in advance which vehicles can enter, where larger apparatus must stage, how responders will reach upper levels, who will guide them, and whether callers’ level designations match those used by emergency services.

The Central Failure: Components Without a Protective System

It is tempting to reduce the case to a single issue: too few guards, passive cameras, limited police presence, a vulnerable garage, or an ambulance-access problem. The more important lesson is that security failures rarely occur in isolation.

A property can have cameras, officers, police relationships, incident reports, and emergency plans while still lacking a functioning protective system. A protective system must connect: threat information, detection, assessment, communication, intervention, emergency response, and review.

At the Short Hills Mall, the regional threat was known. A suspicious vehicle had been observed. Cameras captured extensive evidence of offender behavior. The attackers had time to search for targets. They escaped at high speed. Responders then faced the physical limitations of the garage.

Together, those facts suggest a system better equipped to reconstruct the crime than to interrupt the chain of events leading to it.

What Modern Technology Could Change

It is important not to rewrite history using technology that was immature, unaffordable, or unavailable in 2013. It is equally important to recognize how much has changed.

Even today, no camera, analytics system, or license-plate reader can guarantee prevention. Technology does not replace capable personnel, sound procedures, or police response. But modern systems can create far more opportunities to detect, assess, and interrupt the kinds of behavior seen before the Short Hills Mall attack.

License-Plate Recognition

A properly designed ALPR system can record when a vehicle enters and exits, how long it remains, which entrance it uses, and whether it appears repeatedly. If the December 12 observation had been entered into a shared system, a return on December 15 could have triggered an alert and linked the vehicle to its earlier suspicious activity.

ALPR requires clear governance, including retention periods, access controls, auditing, data-sharing rules, and privacy protections. Poor governance creates risk, but operational blindness is not an acceptable alternative.

Behavioral Video Analytics

Modern analytics alert operators to behaviors like repeated circulation without parking, extended stops in travel lanes, loitering, wrong-way movement, fast exits, recurring vehicles, and activity in restricted areas, reducing the need to monitor multiple screens.

An alert would not prove criminal intent. It could, however, prompt an operator to examine the Suburban while its occupants were still searching, rather than after shots had been fired. That is the difference between forensic and protective surveillance.

Cross-Camera Tracking and Mobile Response

Modern video-management systems can help operators track a vehicle across levels and camera zones, rather than manually guessing which camera to select next. Alerts and associated video can also be sent directly to supervisors, mobile officers, or a remote security operations center.

A responding officer could receive the vehicle image, plate, location, direction of travel, and reason for the alert. That does not require placing an officer on every level; it makes available personnel better informed and more likely to arrive at the right place.

Better Imaging, Mapping and Emergency Communications

Current cameras offer better low-light performance, dynamic range, and resolution, but specifications alone are not enough. Camera design must begin with operational objectives: read a plate, identify a person at an elevator, observe activity around parked vehicles, track movement between levels, or provide responders with useful live information.

Digital maps, standardized level designations, and preplanned response routes can also improve emergency coordination. Security should be able to provide police and EMS with the correct garage, level, entrance, route, and staging location—and indicate whether emergency vehicles can physically enter.

Why Technology Alone Is Still Not Enough

A sophisticated platform can be misconfigured. An ALPR system can generate thousands of records that no one reviews. Analytics can produce so many false alarms that operators ignore them. A mobile alert can reach an officer who has not been trained to respond.

Technology creates value only when it supports a defined operating model: detect, assess, communicate, respond, document, and review.

This requires clear behavior criteria, validated coverage, trained operators, realistic staffing, police-contact thresholds, shift intelligence sharing, privacy rules, testing, quality assurance, and post-incident reviews. Without these, owners may spend heavily to modernize security’s appearance without improving its protective ability.

What Garage Owners Should Have Learned

The Short Hills Mall murder should have compelled owners and operators across the region to reassess parking facilities. Hopefully, many did. But more than a decade later, too many garages still seem to be managed as an afterthought.

The weak formula remains familiar: install cameras, upgrade a few lights, post surveillance signs, schedule occasional vehicle patrols, and assume the problem is solved.

Many garages have cameras mainly recording crimes, leaving blind spots around columns, ramps, and stairwells, with unreliable plate capture. Patrols are predictable or poorly documented, and operators lack criteria for spotting suspicious behavior. Reports aren’t compared across shifts, and police observations don’t reach property staff. Emergency plans state street addresses but not access routes to Level Three.

The property may technically have security, but it lacks security performance.

Camera Count Is Not a Security Measure

Owners still ask, “How many cameras do we have?” The better questions are: What can they detect? What can they identify? Which behaviors attract attention? Who receives an alert? How quickly is it assessed? How quickly can someone intervene? Can the system track a vehicle from entry to exit? Can it identify a vehicle that was seen three days earlier?

A garage with 300 poorly positioned, passively monitored cameras may be less secure than one with 80 well-designed cameras connected to analytics, communications, and disciplined response procedures.

Signs Are Not Deterrence

A sign stating that the premises are under surveillance may discourage some opportunistic behavior. It will not necessarily deter organized offenders who see no visible security presence, no challenge to suspicious conduct, and no indication that anyone is watching in real time.

Deterrence must be credible: visible yet unpredictable patrols, monitored help points, rapid response, and clear evidence that systems are actively managed. To an experienced offender, an unattended camera may mean only that the crime will be recorded.

Security Must Look for Pre-Incident Behavior

Many programs are still designed to respond only after an event: a theft, break-in, assault, or display of a weapon. By then, the protective opportunity may have passed.

A mature garage-security program should monitor repeated circulation, target selection, following, waiting near pedestrian transitions, concealment, door testing, patrol avoidance, coordinated vehicle activity, and unusual interest in high-value cars.

None of those behaviors proves criminal intent. That is why assessment and proportionate response matter. But refusing to examine pre-incident behavior leaves security reacting only after the threat has become unmistakable—possibly after the offender already has a weapon in hand.

The Failure to Learn Is Itself a Risk

Owners and operators are not expected to prevent every crime. They are expected to learn.

A major incident should prompt reassessment of assessments, budgets, policies, patrol strategies, technology standards, and emergency planning. Yet institutional memory is short. Management becomes paralyzed, fearing that any action will admit liability or demonstrate incompetence. Management changes. Budgets tighten. Recommendations are deferred. Officer staffing is reduced. Systems installed after an incident become obsolete, misconfigured, or ignored.

The emotional impact fades, but the vulnerability remains.

The most troubling possibility is not that garage owners failed to understand the lesson of the Short Hills Mall in 2013. It is that many understood it temporarily and then returned to business as usual.

The Question Owners Should Be Asking Today

The question is not whether modern technology could guarantee that the exact Short Hills Mall attack would never recur. It could not.

Would the behavior preceding the attack be more likely to attract attention today? Would repeated circulation trigger an alert? Would the December 12 observation be available to the next shift? Would a returning plate be recognized? Could an operator track it across levels? Would an officer be dispatched to observe? Could police receive a usable image and a live location before the offenders selected a victim? Would responders know exactly where to go and how to get there?

At too many properties, the honest answer may still be “no.”

The technology has changed dramatically since December 2013. The threat has not. And in far too many parking garages, the thinking has not either.

The Mall at Short Hills Today

The Mall at Short Hills is, and always has been, a safe place to visit. As could happen with any location, it was caught off guard by a very foreseeable threat during its busiest time of the year.

Today, the mall has a visible but modest guard force, an upgraded camera system, and a strong police presence from the Millburn, NJ, police. The nearby area has robust mutual aid, with support from adjacent municipalities, well-trained fire departments, and medical teams. State-of-the-art medical facilities are minutes away. As one of the few surviving malls, it appears to thrive, attracting locals and visitors from around the country and world.

Source note: This case study is based on the New Jersey court record, Essex County Prosecutor’s Office materials, public reporting by ABC News and CBS News, and allegations in the wrongful-death complaint. Allegations are identified as such and should not be treated as adjudicated findings.

About Patrick Hurley

Patrick Hurley is the Founder and Managing Principal of S6RG, an independent physical security and risk advisory firm. He brings more than 30 years of experience spanning military service, corporate risk management, public safety, security operations, and crisis management.

A graduate of the United States Naval Academy and a former U.S. Navy Naval Aviator, Patrick has worked with major financial institutions, Fortune 100 companies, and some of the country’s most recognizable properties to develop physical risk management programs for complex commercial, industrial, and residential sites.

At the time of the December 2013 Short Hills Mall carjacking, he was an elected member of the Summit, New Jersey, City Council and Chairman of Public Safety. Because Summit directly borders Short Hills, that role gave him keen insight into the incident, including the regional threat environment, local emergency response, and the incident’s broader public-safety impact.

Through S6RG, Patrick advises clients on protective risk assessments, security technology, program design, crisis management, emergency planning, project oversight, and litigation support.

About S6RG

S6RG is an independent physical security and risk advisory firm helping organizations protect people, property, operations, and reputation. The firm provides protective risk assessments, security program design, technology evaluation, crisis management, emergency planning, project oversight, value engineering, and litigation support.

S6RG brings sophisticated, enterprise-level experience to businesses, property owners, public entities, schools, houses of worship, and private clients that need practical, objective, and vendor-neutral guidance.

I recently parked in a garage beneath a high-rise in Jersey City, and the conditions were deeply concerning from a security standpoint. Poor lighting, obstructed sightlines, confusing circulation, weak wayfinding, and a lack of visible emergency communications created an environment that felt unsafe. It was hard to believe so many controllable security measures had been overlooked.

Subscribe now

The garage sat beneath a residential tower and supported far more than vehicles—structural loads, elevators, utilities, mechanical systems, and fire protection infrastructure all competed for space. That’s a difficult design challenge, but not an excuse to compromise personal safety.

Structural Necessity Does Not Eliminate Security Responsibility….or Liability

Parking garages beneath high-rises are often constrained by structural and economic factors. Columns, shear walls, elevator cores, ramps, utility rooms, and mechanical spaces frequently reduce visibility and create blind spots.

Developers maximize parking, architects coordinate systems, engineers handle loads, and parking consultants optimize circulation. Too often, security is expected to fit around everything else.

That approach is backward.

Garages are often the least controlled and most vulnerable spaces on a property. They are transition zones where people are distracted, exposed, and frequently interacting with public users, delivery personnel, contractors, and others who may have no legitimate reason to enter residential areas.

When visibility, access control, communications, wayfinding, and surveillance are insufficient, the garage becomes the building’s most predictable security risk.

What Safer Garages Require

Security should be integrated into design from the start, not added after construction. Here as some basics:

• Clear Sightlines

People should be able to see entrances, exits, elevators, stairwells, vehicles, and potential hazards. When structural obstructions are unavoidable, lighting, cameras, mirrors, and access controls should mitigate the risk.

• Security-Focused Lighting

Meeting minimum illumination requirements is not enough. Lighting should eliminate dark spots, reduce glare, support facial recognition, and enhance video surveillance. Equally important, it must be maintained.

• Intuitive Wayfinding

Clear signage, floor markings, color coding, and level identification help people move confidently and enable emergency responders to reach the correct location quickly.

• Visible Emergency Communications

Emergency call stations and distress buttons should be easy to find and use, regularly tested, and backed by a defined response procedure.

• Controlled Access

Access to the garage should not equate to unrestricted access to residential areas. Vehicle entry, pedestrian routes, elevators, stairwells, and service areas should serve as distinct security layers.

• Purposeful Surveillance

Cameras should support defined security objectives by covering entrances, exits, stairwells, elevators, pedestrian paths, and other high-risk locations. Their value should be measured by their ability to help detect, track, and investigate incidents.

• Eliminating Concealment Opportunities

Unsecured utility spaces, alcoves, storage areas, abandoned structures, and poorly positioned walls can create unnecessary hiding places. These vulnerabilities should be addressed in both design and operations.

• Management and Maintenance

Burned-out lights, broken doors, damaged cameras, graffiti, debris, and neglected repairs signal poor oversight and heighten security risks.

Subscribe now

The Architect’s Warning

Technology cannot fully compensate for poor design.

A camera cannot see through concrete. An access-control system cannot secure an unmonitored entrance. A call station cannot resolve confusing circulation.

When a tower’s structure dictates the garage layout, security implications should be evaluated early—during programming and schematic design, not after complaints begin.

Column placement, ramps, elevator lobbies, stairwells, loading areas, utility rooms, and mechanical spaces all affect security and should be reviewed accordingly. When vulnerabilities cannot be avoided, they should be documented and mitigated before construction begins.

Security Must Be a Design Discipline

The goal is not to build garages like fortresses. Instead, the goal is to treat security as a core performance requirement alongside structural integrity, code compliance, efficiency, and cost.

A well-designed garage should allow people to see, navigate, communicate, and move through the space safely.

When architects, engineers, developers, parking consultants, and security professionals work in isolation, the result may be a building that performs well above the garage but fails the people who must pass through it below.

And when residents must enter their homes through a dark, confusing environment with blind spots and concealment opportunities, the garage is no longer just a design compromise.

It is a foreseeable risk.

Visit S6RG

Subscribe now

A guard contract is often put in place at a particular moment: a new building opening, a prior incident, a tenant demand, an insurance concern, a board directive, a compliance issue, or a leadership decision made years earlier. The program then becomes part of the operating budget. Invoices arrive. Hours are approved. Posts are filled (usually). The contract renews. Everyone assumes the program is doing what it was designed to do.

But is it?

For many property owners, managers, institutions, and businesses, the honest answer is: no one really knows.

That is a problem.

A guarding program should be viewed as an operational system, not a static expense. Regularly review staffing, post orders, supervision, training, billing, technology, incident reporting, emergency response, quality assurance, and performance. Without this, the organization risks overspending or relying on a program that appears sufficient but fails when needed most.

The Cost of “We’ve Always Done It This Way”

Security guarding programs become less efficient and less effective over time.

A post that made sense five years ago may no longer be necessary. A lobby position may cover the wrong hours. A vehicle patrol may follow predictable rounds that offer little deterrent value. A 24/7 post may persist because no one wants to be responsible for eliminating it. Conversely, a property may be understaffed during periods of highest actual risk because the schedule was designed around convenience rather than exposure. In some cases, even modest attempts to review or rebid a guarding contract are met with pressure, defensiveness, or quiet intimidation from providers who have grown far too comfortable with the account and show up to make you “an offer you can’t refuse.”

Subscribe now

This is how security programs drift: they become disproportionately costly, operationally stale, and less effective.

They drift away from the threat environment. They drift away from business operations. They drift away from tenant expectations. They drift away from what ownership thought it was buying.

The result is often an expensive, familiar program that is poorly aligned with current risk. That should make owners and senior managers uncomfortable.

When Was the Last Time You Looked at the Hours?

Billable hours are where small assumptions become large expenses.

Extra hours, shift differentials, overlap, holiday billing, minimum shifts, overtime leakage, and poorly managed coverage can add thousands to costs annually, with larger portfolios seeing even higher totals.

The issue is not simply whether the invoices are mathematically correct. The more important question is whether the hours being purchased are necessary, properly deployed, and tied to defined protective outcomes.

Is the property paying for presence, performance, or habit?

A thorough review should examine the relationship between post coverage, incident patterns, building activity, visitor volume, tenant operations, loading dock activity, parking demand, public access, prior calls for service, and foreseeable risks. Guarding hours should be defensible, explainable, and connected to operational needs.

If no one can explain why a particular post exists, why it operates during those hours, what it is expected to accomplish, and how performance is measured, it should be reviewed and possibly eliminated.

Visit S6RG

Staffing Is Not Strategy

Many organizations confuse staffing with security.

Having guards on site is not the same as having a security program. A uniformed officer at a desk does not automatically deter. A patrol vehicle does not automatically reduce risk. A sign-in sheet does not automatically control access. A camera monitor does not automatically enable detection, assessment, or response.

The value of guarding depends on design.

What is the officer expected to observe? What decisions can the officer make? Which incidents require escalation? What technology supports the post? What are the response expectations? What authority does the officer have? What training has the officer received? What happens when the officer is absent, distracted, overwhelmed, or unsure?

A well-designed guarding program begins with the function, not the headcount.

Sometimes the answer is more staff. Sometimes it is less staff. Sometimes it is different staff. Sometimes the better solution is a combination of physical design, access control, video analytics, remote monitoring, visitor management, lighting, policy, and targeted patrols.

The objective should not be to buy guards. It should be to manage risk.

Training Cannot Be Assumed

Many guard contracts include language about training. That does not mean the officers assigned to your site are properly trained for your site. In many cases, guards only complete the minimum training required to be licensed.

There is a significant difference among general licensing, basic orientation, and site-specific readiness. Guards assigned to residential high-rises, office buildings, healthcare facilities, schools, mixed-use developments, industrial sites, houses of worship, and retail properties face very different conditions and expectations. They need to understand the environment, people, escalation pathways, emergencies, and risks.

Can the officers explain the site’s emergency action plan? Do they know how to respond to a medical emergency, workplace violence incident, fire alarm, suspicious package report, domestic dispute, protest activity, active assailant threat, utility failure, or access control breach?

Do they know whom to call, what to document, when to intervene, when not to intervene, and how to preserve video, logs, and incident evidence?

If the answer is unclear, the training program is deficient.

Security officers are often the first visible representatives of a property’s security posture. In a serious incident, they may also serve as central witnesses. Their actions, inactions, reports, communications, and training records may later be reviewed by insurers, attorneys, regulators, ownership, tenants, the public, and even judges and juries.

Competitive Bidding Is Not Just About Price

Many organizations put guarding services out to bid only when they are dissatisfied with the provider or under pressure to reduce costs. That is too narrow.

Competitive bidding is more than a purchasing process; it tests the entire security program. Proper management reveals whether the scope is unclear, post orders are outdated, supervision is weak, wages are too low, technology is underused, or the incumbent is coasting.

But a poorly written request for proposal can create its own problems. If the scope is vague, bidders will price their assumptions. If the evaluation is driven primarily by hourly rate, the client may get exactly what it paid for: low wages, high turnover, weak supervision, minimal training, and limited accountability.

The best bid process begins before the RFP, with an independent review of the program, outcomes, required positions, qualifications, supervision model, reporting, and performance measurement. Otherwise, the organization is not buying better security. It is merely rebidding the same, probably obsolete, assumptions.

The Risk of Poor Documentation

Guarding programs are often judged after something goes wrong. At that point, documentation, post orders, training records, incident reports, daily activity logs, corrective action records, staffing rosters, visitor logs, video retention practices, and emails and contract documents all matter.

A property may believe it had a reasonable security program, but if the documentation is incomplete, inconsistent, outdated, or contradictory, that belief may be difficult to defend.

This is crucial for properties with public access, residents, parking, past incidents, disorder, tenant complaints, crime trends, vulnerable groups, or security call history. The security program must be more than performative; it should be thoughtful, well-documented, supervised, and periodically reviewed.

A good program does not need to be perfect. But it does need to make sense.

Technology May Be Changing the Guarding Equation

The guarding model has changed.

Video analytics, access control data, remote guarding, visitor management systems, license plate recognition, emergency communications platforms, mobile reporting, GPS-enabled patrol verification, digital incident management, and real-time operations centers can all influence how staffing should be designed.

This does not mean technology replaces guards in every case. It means guarding and technology should be evaluated together.

A lobby officer monitoring cameras may be less effective than a trained remote operator supported by analytics and clear escalation protocols. A mobile patrol may be more effective when guided by real-time incident data rather than a fixed route. A loading dock post may be unnecessary during certain hours if access control, intercom, video verification, and response procedures are properly designed. A residential property may need more human presence during predictable periods of resident interaction, but less static coverage during low-activity hours.

The right answer depends on the site. The wrong answer is to keep paying for yesterday’s model because no one has challenged it.

Questions Owners and Managers Should Be Asking

A mature review of a guarding program should be direct and practical.

When was the staffing plan last reviewed against actual risk, activity, and incident data? Are the posts still necessary? Are the hours aligned with periods of highest exposure? Are officers properly trained for the specific site? Are post orders current, realistic, and followed? Are invoices reviewed for accuracy, including overtime, holidays, special coverage, and contract compliance? Is the provider held to measurable performance standards? Has the contract been competitively bid in a disciplined manner? Are wage rates sufficient to attract the caliber of officer the property expects? Is technology used to reduce waste and improve performance? Are incident reports complete, timely, and useful? Is there evidence that the program is reducing risk?

These are not academic questions. They directly address cost, performance, liability, and duty of care.

Subscribe now

The Security Guarding Audit

For organizations unsure whether their guarding program still makes sense, the best starting point is an independent security guarding audit.

This is not a vendor sales call. It is not a staffing company proposing to replace the incumbent. It is an objective review of the existing program.

A thorough audit reviews contract structure, billable hours, post coverage, staffing levels, incident history, guard performance, supervision, training, post orders, technology, invoicing, reporting, emergency readiness, and site risk alignment. It identifies effective practices, unnecessary elements, underperformers, overpayments, and vulnerabilities.

Sometimes, the conclusion is that the existing provider performs well, but their scope needs refinement. Other cases require rebidding. Occasionally, reducing static posts and reinvesting in technology, supervision, patrols, or emergency preparedness is best. Sometimes, increasing coverage is necessary if the current program is too thin for the risk.

The point is not to cut guards. The point is to make the program defensible, efficient, and effective.

Familiar Does Not Mean Sound

Security programs can become expensive habits.

A guard sitting at a desk every day creates a sense of continuity. A patrol route creates a sense of activity. A monthly invoice creates a sense that something is being managed. But none of that proves the program is properly designed.

For owners, executives, boards, property managers, and institutional leaders, the question is straightforward:

Does your guarding program still make sense?

If you have not reviewed the staffing model, billable hours, training, post orders, supervision, technology integration, contract structure, and competitive pricing in the last few years, you may not know the answer.

And if you do not know the answer, you may already be carrying more cost — and more risk — than you realize.

S6RG helps property owners, institutions, businesses, and private clients evaluate, redesign, and optimize physical security programs through independent, vendor-neutral security assessments, guarding audits, and protective risk advisory services.

Visit S6RG

Subscribe now

Serious security incidents often follow intentionally overlooked warning signs: deferred maintenance, improvised controls, neglected documentation, aging systems, drifting vendors, unresolved complaints, and sidestepped decisions. The concern is that acting might confirm the risks, so they ignore them, relying on silence and hope for safety.

Negligent security isn’t just about cameras, guards, locks, gates, lights, or access control. Do these measures align with the foreseeable risk? Does management know, document, prioritize, and act on it?

After a serious incident, the property’s security program is scrutinized in a charged, adversarial setting. Nothing escapes scrutiny. Every system, policy, and procedure is examined against facts, claim files, depositions, expert reports, insurance, investor pressure, tenant disputes, incident logs, maintenance records, media narratives, and litigation.

Everyone will ask what management knew. What should they have known? What did they do about it?

Foreseeable risk extends beyond past site incidents and is influenced by variables such as police reports, nearby crime, tenant complaints, access issues, parking lot activity, lighting, public access, cash handling, staffing gaps, vendor reports, broken doors, camera blind zones, and property usage.

If any of those variables, individually or in combination, indicated elevated risk and were ignored, or if management failed to connect the dots despite those signals, the problem is not bad luck. It is an unmanaged risk, and it’s likely negligence.

There are two kinds of property owners and managers.

The first group treats security as part of asset stewardship. They assess risk, review it, test it, document it, question vendors, study incidents, inspect access points, evaluate lighting, challenge staffing models, and make decisions they can defend later.

The second group ignores security, focusing only on maximizing revenue and cutting expenses —residents, tenants, patrons, and the public be damned. They rely on outdated systems and assumptions, fail to adapt, and see security as an unnecessary expense while squeezing every penny from the property.

They assume cameras work because they exist, lighting is effective because lights turn on, guards are effective because hours are billed, access control works because doors open, and policies are followed because a binder exists. It’s like saying, “We assumed the roof was fine because it hadn’t collapsed.”

Their charade, along with the false sense of security among unknowing tenants, residents, or patrons, will evaporate quickly after a nearby or on-site shooting, assault, robbery, break-in, workplace violence incident, parking-lot attack, unauthorized entry, or tenant injury.

The financial exposure can be severe. Litigation costs, insurance consequences, settlement pressure, verdict risk, reputational damage, tenant loss, regulatory scrutiny, lender concern, investor questions, and management credibility can all arrive at once. Nobody will want to work, shop, or live there.

Subscribe now

By then, the cost of a thorough security review will seem insignificant. But, by then, it’s also too late.

The market is already sending warnings. Negligent-security claims involving residential, commercial, retail, and luxury properties are drawing serious scrutiny. The facts vary. The legal theories vary. Courts vary, and juries vary.

The issue is not whether every crime can be prevented. It cannot. The issue is whether management had a reasonable process to identify foreseeable risk, evaluate the property, implement appropriate measures, maintain those measures, and document decisions before something happened.

The most professional and responsible owners are not waiting for a tragedy, lawsuit, or insurer to force the conversation. They are seeking advice, assessing security risks in detail, seeking recommendations, and mitigating risk by facing the tough questions.

Uncertainty is not a strategy

Owners, asset managers, developers, institutions, and property managers who believe their security program doesn’t align with their property’s risk profile shouldn’t panic or act hastily. They shouldn’t buy more cameras on vendor recommendations or increase guard hours out of fear. Nor should they rely on unqualified advice from a “retired this” and “retired that” without security or commercial risk management experience.

The first step is an independent assessment. S6RG refers to this as a Protective Risk Assessment.

A Protective Risk Assessment is an independent review of the property’s environment, risks, conditions, technology, staffing, procedures, documentation, incident history, vendor performance, and management practices—measured against global security standards. Its goal is to identify key issues, prioritize actions, mitigate risks, and develop a sound security management process.

Often, key improvements include better access control, expanded camera coverage, improved lighting, door and gate audits, updated post orders, stronger visitor procedures, documented response protocols, incident-pattern analysis, clearer vendor accountability, and ownership of unresolved deficiencies.

The owners who act now will be able to say they took the issue seriously. The owners who wait will someday have to explain why they did not.

Subscribe now

Every property reveals truths about security management through logs, reports, video archives, access records, complaints, police calls, vendor agreements, patrol logs, emails, budgets, and decisions. While imperfect, these records must demonstrate management’s risk awareness and practical mitigation efforts.

If ownership does not ask the hard questions now, someone else will ask them later, under oath, once the damage is done.

Negligent security is not just a legal allegation - it is often defined by the actions of irresponsible property owners and managers who refuse to even acknowledge foreseeable risk, let alone act to mitigate it.

Visit S6RG

Outdoor dining has become a key feature of modern downtowns. It gained popularity before COVID, peaked during the pandemic, and now many U.S. communities are working to make it more permanent. My town, Summit, NJ, is no different. There’s broad agreement that it’s a good idea after experiencing it during COVID, but because it’s seasonal, the economic benefits are clear while safety and security concerns are less certain. This has led to disagreements that are perhaps necessary rather than unnecessary.

What began as an emergency response during the pandemic has evolved into lasting changes to streets, sidewalks, and public spaces nationwide. In many areas, the outcomes have been very positive. Restaurants have expanded seating, downtowns have become livelier, and residents have welcomed a more pedestrian-friendly atmosphere.

Yet beneath the atmosphere and aesthetics lies a reality that many municipalities, property owners, and business operators still overlook. Outdoor dining creates an entirely new risk environment—one that introduces safety, security, engineering, and liability challenges that do not exist inside a traditional building.

The issue is not that outdoor dining is inherently unsafe. Rather, many outdoor dining areas and concepts were implemented quickly and, in some cases, have remained in place without the level of engineering analysis, security planning, or operational review typically associated with public infrastructure. What often appears to be a simple collection of tables, planters, and decorative barriers can pose a surprisingly complex public-safety challenge.

Subscribe now

A Different Kind of Environment

Restaurants are traditionally designed to separate people from hazards. Walls, structural elements, controlled entrances, fire protection systems, and setbacks from traffic all contribute to a relatively predictable environment.

Outdoor dining removes many of these protections.

Today, patrons may find themselves seated just a few feet from moving traffic, including delivery vehicles, rideshare activity, bicycles, scooters, emergency vehicles, and large crowds. In some cases, dining areas occupy former parking lanes or entire streets, with little more than decorative barriers separating diners from intersecting, fully open roadways.

This shift fundamentally changes the risk profile of the space.

The most obvious concern is vehicle intrusion. Although incidents of vehicles entering pedestrian spaces remain relatively uncommon, the consequences can be catastrophic when they occur. Whether caused by driver error, medical emergencies, intoxication, mechanical failure, or intentional acts, vehicles carry an extraordinary amount of destructive force.

Engineers assess that force using kinetic energy, which increases exponentially with vehicle speed. A relatively small increase in speed can dramatically increase impact forces. This is why a barrier that appears substantial to the public may offer little meaningful protection against a vehicle impact.

Many outdoor dining installations rely heavily on visual cues rather than on engineered performance. Large planters, decorative fencing, wooden structures, and movable barriers often create the perception of safety without providing meaningful impact resistance. Many of these features were never designed, tested, or intended to stop a moving vehicle.

The Difference Between Decorative and Protective

One of the most common misconceptions about outdoor dining safety is that anything heavy must be protective.

Unfortunately, that is not always true.

A decorative planter weighing several hundred pounds may seem capable of stopping a vehicle. However, impact performance depends on far more than weight alone. Foundation design, anchorage, reinforcement, structural connections, soil conditions, and vehicle approach angles all influence whether a barrier can perform its intended function during an impact.

This is why security engineers and protective design professionals rely on crash-tested systems rather than on assumptions.

In the United States, vehicle barriers are often evaluated using standards such as ASTM F2656, which assesses a barrier’s ability to stop vehicles of specified weights traveling at specified speeds. More recently, ASTM F3016 has become increasingly relevant for protecting storefronts, sidewalks, and other pedestrian environments from impacts by low-speed vehicles.

These standards do not simply assess whether a barrier survives a collision. They also evaluate how far a vehicle penetrates beyond the barrier after impact, which is often the critical factor in protecting people.

The distinction matters because many outdoor dining installations incorporate elements that have never undergone formal testing. While they may improve aesthetics and help define a space, they may contribute little to actual protection.

The Engineering Most People Never See

Effective outdoor dining protection is rarely seen.

The public notices attractive landscaping, decorative street furniture, lighting, and comfortable seating. What they do not notice are the engineering calculations that determine whether those features can withstand impact forces, maintain emergency access, and support safe operations over time.

Even something as simple as bollard spacing illustrates this complexity.

Place bollards too close together, and accessibility suffers. Place them too far apart, and vehicles may be able to pass between them. The optimal spacing depends on numerous factors, including vehicle dimensions, approach angles, pedestrian circulation, accessibility requirements, and the specific threat.

The same complexity lies beneath the surface. Many high-performance barriers require substantial foundations extending several feet below grade. Utility conflicts, drainage systems, frost-protection requirements, and underground infrastructure must all be considered before installation.

What appears to be a simple streetscape improvement often requires extensive coordination among engineers, planners, architects, public works officials, emergency responders, and security professionals.

Emergency Access Cannot Be an Afterthought

One of the most overlooked aspects of outdoor dining design is access for emergencies.

Street closures and protective barriers may improve pedestrian safety but pose challenges for fire departments, EMS agencies, and law enforcement. Emergency vehicles require sufficient roadway width, turning radii, and access points to operate effectively during critical incidents.

A design that works well on a pleasant Saturday evening may pose significant problems during a structural fire, a medical emergency, or a mass-casualty incident.

This challenge becomes particularly acute in older downtown districts, where roadway widths were already constrained long before the advent of outdoor dining.

Balancing protection and accessibility requires careful analysis. Too little protection leaves patrons vulnerable, while excessive infrastructure in the wrong location can impede emergency operations. Achieving the proper balance requires both engineering expertise and operational understanding.

Security Risks Extend Beyond Traffic

While vehicle intrusion often receives the most attention, it is only one part of the overall risk landscape.

Outdoor dining areas are highly public, highly visible, and often densely populated. These characteristics create opportunities for theft, disorderly conduct, assaults, vandalism, and other security incidents. The open nature of these environments can also complicate surveillance, access control, and emergency response.

Good design can significantly reduce many of these risks. Proper lighting improves visibility, and camera systems enhance situational awareness. Thoughtful site layouts eliminate blind spots and increase natural surveillance. Staff training and emergency procedures further strengthen resilience.

The most effective security measures often go unnoticed because they are seamlessly integrated into the environment rather than imposed upon it.

Weather Is a Design Problem Too

Another commonly overlooked issue is the weather.

Temporary structures, tents, umbrellas, partitions, and decorative elements may perform well under normal conditions but can become hazards during severe weather. High winds can turn unsecured objects into dangerous projectiles. Heavy rain can cause drainage issues and create slip hazards. Snow and ice introduce additional structural and operational concerns.

Even seemingly minor decisions—such as how an umbrella is anchored or how a temporary enclosure is secured—can carry significant safety implications.

What appears to be a simple outdoor seating area may require structural analysis, electrical review, drainage evaluation, and emergency operating procedures.

The Liability Question

As outdoor dining shifts from a temporary measure to a permanent feature of the built environment, expectations are evolving.

Property owners, municipalities, and business operators increasingly face scrutiny over whether foreseeable hazards were properly evaluated and addressed. After a serious incident, the question is rarely whether a risk could have been eliminated entirely. Instead, the focus often shifts to whether reasonable steps were taken to identify, assess, and mitigate foreseeable hazards.

That distinction is important.

No environment can ever be completely risk-free. However, organizations that fail to conduct appropriate assessments, implement reasonable safeguards, or engage qualified professionals may face difficult questions following an incident.

Subscribe now

Safe Outdoor Dining Doesn’t Happen by Accident

Outdoor dining can be vibrant, welcoming, and highly successful. Many communities have shown that these spaces can enhance quality of life, strengthen local economies, and create memorable public experiences.

But successful outdoor dining is rarely the result of luck alone.

Behind the most effective installations are countless decisions spanning engineering, security, emergency management, operations, and risk management. The barriers are properly designed. Emergency access has been considered. Vehicle pathways have been evaluated. Security measures have been integrated thoughtfully rather than added as an afterthought.

The challenge is that most of this work remains invisible to the public.

People notice the atmosphere, the food, and the overall experience.

What they do not see is the planning that makes those experiences possible.

That planning is what transforms outdoor dining from a temporary gathering space into a truly safe public space.

About S6RG

S6RG is an independent physical security and risk advisory firm serving organizations, institutions, developers, and private clients that require sophisticated guidance on physical security, protective risk management, and organizational resilience. We work with select clients across the commercial, retail, residential, mixed-use, healthcare, educational, and nonprofit sectors, providing security assessments, protective design, strategic planning, and security program development.

Visit S6RG

When most people think about security for the 2026 FIFA World Cup, they picture the stadium. Metal detectors. Tactical teams. K-9 units. Bag checks. Police lines. Helicopters overhead.

But for communities, businesses, property owners, and individuals across New York and New Jersey, the greatest risks are not confined to a stadium’s perimeter. They are at train stations, outside bars, in crowded downtowns, at outdoor watch parties, in rideshare pickup zones, on closed streets, in parks, in hotels, at transit choke points, among overtaxed first responders, at overloaded dispatch centers, and even online.

The World Cup is more than a sporting event. It is a six-week regional stress test for public safety, infrastructure, emergency management, and personal preparedness.

The Security Footprint Extends Far Beyond MetLife Stadium

Yes, MetLife Stadium will host high-profile matches, including the final, under the global spotlight. However, the tournament’s operational footprint extends far beyond East Rutherford.

Every community connected to the region’s transportation system, hospitality industry, nightlife economy, or tourism ecosystem becomes part of the event, whether it wants to or not. That includes Jersey City, Hoboken, Newark, Secaucus, Elizabeth, New York City, and countless suburban downtowns across northern New Jersey, where visitors will gather to eat, drink, watch matches, and travel throughout the region.

Millions of people are expected to pass through the NYC/NJ area during the tournament. Many will never set foot in a stadium, yet they will still pose security challenges.

That means the security burden will not rest solely on governments or law enforcement.

Property managers, hotels, restaurants, retailers, office buildings, apartment complexes, transportation providers, and even ordinary residents will operate in an elevated-risk environment.

Visit Us

The Greatest Vulnerability May Be the “Soft Targets”

Modern stadiums are hardened environments. The areas surrounding them often are not. For global events like FIFA, the surrounding areas can extend for dozens of miles.

Outdoor dining districts, fan zones, public plazas, restaurant corridors, waterfront parks, temporary queuing areas, transit hubs, hotels, apartment buildings, and entertainment districts are attractive targets because they are crowded, difficult to secure, and often lightly protected.

Unfortunately, many organizations still rely on improvised security measures that were never designed for high-threat environments. Decorative barriers, temporary fencing, cones, lightweight barricades, and minimal staffing are often treated as sufficient simply because they create an appearance of control.

Small and medium-sized businesses should not assume they are “too small” to be affected. In many cases, opportunistic crime targets locations with the weakest security posture, not necessarily the highest profile.

Property managers should evaluate access control, visitor management, lighting, camera coverage, package security, emergency communications, and coordination with local police and emergency responders before the tournament begins. Restaurants and bars should prepare for crowd management, intoxicated patrons, disputes, theft, and surges in foot traffic. Retailers should anticipate increases in shoplifting, organized retail theft, fraud, and disruptive behavior.

Individuals and families should also rethink personal safety at large-scale events. Situational awareness and transportation plans matter. Knowing alternate routes, avoiding overcrowded areas when possible, and staying in contact with family members during major events can make a significant difference in an emergency.

Human Trafficking Will Also Be a Major Concern

Large international events do not just draw tourists and fans. They also attract organized crime.

Human trafficking has historically increased around major sporting events, conventions, festivals, and high-volume tourism periods because traffickers follow demand, anonymity, and opportunity. The sheer volume of visitors, hotel activity, rideshare traffic, nightlife, and temporary labor creates an environment where exploitation can be easier to hide in plain sight.

This is not just a law enforcement issue; it is a community issue.

Hotel staff, rideshare drivers, bartenders, restaurant workers, security personnel, property managers, transportation employees, healthcare workers, and ordinary citizens may encounter signs of trafficking without recognizing them.

The signs are often subtle.

A young person who appears fearful, withdrawn, or controlled by someone else. Individuals who avoid eye contact or seem unable to speak freely. Someone who appears coached or monitored while answering basic questions. Guests are rotating rapidly through hotel rooms. Excessive foot traffic to rooms at unusual hours. Minors accompanied by unrelated adults in suspicious circumstances. Individuals who appear malnourished, exhausted, injured, or deprived of personal possessions or identification.

Most importantly, trafficking victims often do not self-identify as such. Fear, coercion, debt, threats, addiction, immigration concerns, or psychological control often prevent them from seeking help.

That means awareness, training, and reporting are important.

Businesses and property owners should consider providing basic staff awareness training before the event begins so employees understand what suspicious activity may look like and how to report concerns safely and appropriately.

Vehicle Attacks Remain a Serious Concern

One of the most overlooked risks is hostile-vehicle mitigation. Many organizations still confuse traffic management with security, yet they are not the same.

A row of orange cones does not provide hostile-vehicle protection. Neither do decorative planters unless they are engineered, crash-rated, and properly installed. If not, they can actually become part of the threat.

Any location expecting large crowds — including restaurants, office campuses, apartment complexes, hotels, outdoor events, and downtown business districts — should assess vehicle access, pedestrian density, emergency vehicle routes, crowd egress patterns, and perimeter vulnerabilities.

Subscribe now

Transit Systems Will Become Security Environments

The World Cup will depend heavily on regional transit infrastructure. That means train stations, bus terminals, rideshare zones, pedestrian bridges, and surrounding streets will become security zones — not just transportation hubs.

Crowd compression, delayed trains, heat emergencies, intoxicated patrons, aggressive behavior, medical incidents, and panic conditions can escalate quickly when tens of thousands of people move through confined spaces.

Individuals should anticipate delays, congestion, and communication challenges. Businesses should prepare for disruptions to employee commutes, delivery delays, and operational interruptions.

Cybersecurity Is Now a Public Safety Issue

Cybersecurity can no longer be treated as merely an IT issue.

Large international events create opportunities for ransomware attacks, phishing campaigns, fake emergency messages, fraudulent ticketing schemes, compromise of surveillance systems, and attacks on dispatch or traffic management systems.

Small businesses are often especially vulnerable because they may lack dedicated cybersecurity staff or incident-response plans.

Before the tournament begins, business owners should ensure software is up to date, enable multi-factor authentication, review backup procedures, educate employees about phishing, and verify emergency contact procedures.

Individuals should also remain cautious of ticket scams, fake event websites, fraudulent QR codes, fake rideshare accounts, and malicious public Wi-Fi networks.

Preparation Matters More Than Panic

The wrong question is “How do we secure the World Cup?” The better question is “How will the World Cup affect our people, property, operations, and daily routines?”

For municipalities, this means emergency planning and coordination. For property managers, this means assessing vulnerabilities before problems occur. For businesses, this means understanding operational and liability risks in a high-volume environment. For individuals and families, this means practicing awareness and preparedness without fear.

The 2026 FIFA World Cup will bring significant energy, economic activity, and international attention to the NYC/NJ region. It will also expose weaknesses. The organizations and individuals that perform best during large-scale events are usually not the ones with the biggest budgets. They are the ones who prepared before the crowds arrived.

The case of Nancy Guthrie highlights a critical and recurring issue: many high-profile, high-net-worth households believe they are protected, yet they are not.

The Illusion of Security

One of the most consequential aspects of this case is not what was missing but what was present yet ineffective.

Cameras were installed, yet coverage appears insufficient. More importantly, there were no active subscriptions to enable real-time analytics, alerting, or response. The system functioned as little more than a passive recording tool, leaving fragmented footage available only after the incident.

Without active monitoring and properly configured alerts, modern residential security systems are significantly degraded. They lack real-time detection, escalation capabilities, and immediate access to actionable intelligence. In time-sensitive events such as abductions, this distinction is critical. The difference between prevention and post-incident investigation is often measured in minutes.

This was not a technological failure—it was a failure of configuration, integration, and strategy.

Subscribe now

Security Without Strategy

Homeowners routinely invest significant effort in designing and optimizing their properties—carefully evaluating materials, layouts, and aesthetics. Security, however, is often treated differently. Decisions are frequently deferred to vendors whose incentives are tied to selling equipment rather than to solving risk.

As a result, many homes have technology that creates the appearance of protection but lacks operational effectiveness. Cameras are installed but poorly configured. Access control exists, but is not integrated. Alerting, escalation, and response protocols are undefined.

This is not a partial solution—it is security theater.

The Broader Exposure

A critical oversight in many security programs is the narrow focus on the primary residence.

For high-profile individuals, the threat rarely presents itself directly. Instead, attackers exploit the broader ecosystem—family members, routines, and secondary locations that are less protected and more predictable. Parents living independently, college-age children, siblings, and extended family members are often softer targets. They are not separate from the risk; they are frequently the pathway to it.

Compounding Failures

Incidents like this are rarely the result of a single weakness. They stem from a combination of incomplete systems, predictable behavior, and insufficient planning.

Technology is installed but not actively managed. Daily routines create observable patterns. There is no defined response framework—no shared understanding of warning signs, roles, or actions during stress. Without real-time situational awareness, incidents go undetected until intervention becomes significantly more difficult.

Time as the Deciding Factor

In any abduction or coercion scenario, time is the most valuable resource.

Early detection enables intervention. Real-time awareness enables decision-making. Speed determines the outcome.

A camera system without alerts does not deter or protect—it only documents. By the time footage is reviewed, the most critical window has already closed.

What Effective Security Would Look Like

A properly engineered security program is designed to operate in real time. It integrates detection, communication, and response into a cohesive system.

Monitoring and alerting must be active and intelligent, delivering actionable information to the right people without delay. Systems must be integrated so that cameras, alarms, and access controls operate as a unified platform rather than as isolated tools. Protection must extend beyond a single property to encompass the individual’s or family’s full exposure network.

Equally important is pathway analysis—understanding how an attacker would identify, surveil, and approach a target—and then systematically disrupting that pathway before it is executed.

Where Most Approaches Fail

The gap between installed technology and operational security is where most failures occur.

This is where a firm like S6RG positions itself differently. The focus is not on installing systems but on engineering outcomes—ensuring that what exists actually works in real-world conditions. That means identifying hidden gaps, activating dormant capabilities, integrating systems, and building response frameworks that perform under pressure.

Most importantly, it means eliminating silent failures—such as inactive subscriptions or unmonitored systems—that foster false confidence while leaving real vulnerabilities exposed.

Final Thought: The Risk of Being “Almost Secure”

The most dangerous condition is not the absence of security—it is the illusion of security.

A camera without alerts.
A system without monitoring.
A plan that covers only part of the risk.

These are not incomplete solutions; they are predictable failure points.

The lesson from the Nancy Guthrie case is not simply that something went wrong. It is that earlier detection—and potentially disruption—could have been achieved much more easily if the system had been designed to function as intended.

That is the difference between security that looks effective… and security that actually is effective.

A Better Approach

S6RG exists to close this gap.

We work with high-net-worth individuals and families to identify where protection appears to exist—and where it fails under real-world conditions. Our assessments are independent, discreet, and grounded in how threats develop and unfold.

We do not sell products. We design outcomes.

Through our Protective Risk Framwork™ architecture, we ensure your systems are active, integrated, and aligned with real risk—not assumptions. We extend protection beyond a single residence to your entire exposure network and build the detection, awareness, and response capabilities needed to act in time—when it matters most.

Because in this space, the difference isn’t technology. It’s whether it works.

Contact us at : protection@s6rg.net of visit our website www.s6rg.net

Subscribe now

The idea of remote guarding may seem creepy… and for good reasons. But with the right service provider, it doesn’t have to be.

Remote guarding does not increase security risks from camera malfunctions or analytics failures. While some systems perform better than others, overall, the products and services available today improve security programs and make sites safer. However, they can also significantly and unknowingly raise risks related to security, privacy, compliance, and reputation, depending on how operations are managed, who oversees them, and the standards, policies, procedures, and controls in place. Failures often arise from management choices and the standards they follow.

As the adoption of Remote Guarding becomes mainstream, concerning trends are emerging. Despite more reliable technology that seems effective and lower costs, many vendors are struggling to scale and operate from Remote Security Operations Centers (RSOC), which are often under-governed, loosely controlled, and poorly staffed. Clients have simply traded one risk for another.

Subscribe now

With Remote Guarding, security now relies not only on on-site equipment, but also on who is monitoring remotely, where they are, and how they are doing it.

You’re not just adding cameras and AI. You’re granting strangers outside access. Are they credentialed? Are they authenticated?

Each remote guarding deployment introduces a new reality for each client—a paradigm shift in extended privacy and compliance risk. It’s a visual vulnerability, a risk that must be evaluated and understood before trusting a vendor.

Somewhere, an operator now has live visibility into your environment. Not snapshots or reports—real-time access to how a property functions, how people move, what they do, and even what they wear. And they know when those people and places are most vulnerable.

Over time, that visibility shifts from mere observation to comprehension. Patterns emerge. Routines become predictable. Gaps are revealed. For high-risk, high-compliance locations, high-value residences, and other sensitive facilities, that level of insight isn’t just operational - it provides a high-definition view into proprietary operations and private lives. It’s exclusive, actionable, and exploitable intelligence.

What’s Often Not Part of the Sales Discussion

Most discussions about remote guarding focus on performance—how well the system detects, how quickly it responds, and how much it saves. What is rarely examined with the same care is the environment on the other side of the connection. Who is watching and from where? What is their training? What policies, procedures, and controls are in place to ensure privacy and confidentiality?

The Remote Security Operations Center, the RSOC, where everything happens, is often overlooked and rarely discussed. A black box. Something assumed to be secure just because it exists. That’s where these new risks are created.

Contact Us

A Failure Mode That Doesn’t Look Like Failure

Imagine a system that appears to work perfectly. Alerts are triggered. Operators respond. Reports are produced. From the client’s perspective, everything seems to function properly.

But behind the scenes, controls are often weak. Access to live feeds exceeds necessary limits. Operator environments lack strict oversight. Monitoring is limited. Activity is not properly audited.

Nothing is “breached.” Nothing is “hacked.” Yet, something more subtle is emerging.

The system and its operators are quietly developing a detailed understanding of the environment—who is there, when they’re gone, how routines change, and where vulnerabilities exist.

Everything is visible and accessible.

The exposure isn’t due to a security incident. It results from a lack of operational controls, supervision, or discipline.

When Remote Guarding Becomes Liability

This is where remote guarding can go beyond just a security risk; it can also increase compliance, privacy, and reputational concerns. What was intended to lower risk can actually elevate it—adding to existing dangers and creating new ones—often silently and without awareness.

The effects don’t become apparent immediately. They appear later, possibly after private videos of your location’s employees or family members are uploaded online. That’s when attention shifts from system performance to accountability. Site managers and security directors may lose their jobs, a family’s privacy gets compromised, reputations are endangered, and regulators begin asking for answers and conducting audits.

Who had access to this information, and what controls managed that access? If those answers are unclear, the issue is no longer technical. It’s legal, reputational, and structural.

The Gap Few See….Until it’s Too Late

From an outside view, most RSOCs appear similar. They share comparable video walls, language, and assertions of effectiveness and cost savings. But a significant, industry-wide gap continues to widen between sophisticated, well-managed, highly compliant operations and those quickly assembled for quick, ad hoc services.

One is built with a structured approach, clearly defined controls, tightly managed access, and ongoing oversight. The other relies on assumptions and an illusion of sophistication created by technological disguises that aren’t genuine.

What Sophisticated Clients Are Starting to Understand

The most informed clients are no longer just concerned with whether a system can detect a threat. They seek something more important: Who and what controls the people and environment operating the service?

That shift—from solely focusing on performance to combining performance with governance—may seem minor, but it has a big impact. Remote guarding doesn’t fail at the camera; it fails at the control point—the RSOC. Once clients fully understand these risks and the industry begins to address them, Remote Guarding will become common across all sectors.

A Practical Starting Point

For those evaluating remote guarding or reassessing an existing deployment, the most important step is to focus on the RSOC itself. Not the marketing, not the interface — the core operations, policies, procedures, and controls.

We developed a concise resource to address that, highlighting the most common gaps observed in real-world deployments and the risks they often pose.

Remote Guarding - Red Flags: What Every Client Should Demand Before Deploying Remote Guarding

👉 Download it here:

Download

Final Thought

Technology has made visibility easier. The key now is control. In remote guarding, control isn’t at the camera; it’s at the other end of the connection.

Subscribe now

Recent incidents and increasing fears of attacks have made faith-based organizations confront a difficult truth: houses of worship are becoming prime targets. Whether motivated by ideology, grievances, or opportunity, attacks on congregations are happening more often because nothing expresses outrage and hatred quite like attacking a full church, synagogue, or mosque.

Subscribe now

In response, many security companies have become a chorus promoting that the only solution is an armed guard. Just have them come out and perform one of the “free” assessments they offer, and they’ll show you just how many guys with guns you need, usually more than you ever thought.

Understandably, leaders of churches, synagogues, and mosques across the country are asking themselves: “Should we hire armed security?”

That’s a valid question, but it’s also the wrong one.

The Illusion of a Simple Answer

Armed security is often seen as a yes-or-no choice—either you have it, or you don’t. But the answer is more complex.

Introducing firearms into a house of worship is not just a security choice. It is a cultural, operational, and liability decision—one that fundamentally alters the environment it is meant to safeguard.

When done well, it can save lives. When done poorly, it can introduce new risks and undermine the very sense of sanctuary it aims to protect.

The Case for Armed Protection

There is no denying the primary benefit: quick response and rapid neutralization of an immediate threat. In a violent incident, every second counts. Even in well-patrolled areas, law enforcement response times are usually measured in minutes. An on-site, trained, and well-positioned armed professional can stop or interrupt an attack within seconds, preventing escalation.

There is also a deterrent effect. Attackers usually target vulnerable, unprotected environments. A hardened target—whether visibly or discreetly protected—can influence their decision-making. For some groups, especially those with higher threat levels due to visibility, identity, or past incidents, armed security may be necessary.

Visit Us

What Often Gets Overlooked

The presence of armed security often introduces underestimated risks. First, it affects the environment. Houses of worship are meant to feel open, welcoming, and safe. The visible presence of firearms can subtly or significantly alter that feeling toward tension, alertness, or even hypervigilance.

Second, there is operational risk. Even with highly trained professionals working in dynamic, unpredictable environments, the potential for misidentification, escalation, or unintended results is never zero. The risk of unintended, even tragic, outcomes from the chaos caused by an actual incident is high.

Third, there is liability. When an organization deploys armed personnel, it takes responsibility for use-of-force decisions. This brings legal, financial, and reputational risks that must be fully understood—not overlooked.

Finally, armed security can create a false sense of safety, which could be the greatest risk.

Armed guards don’t prevent attacks by themselves; they react to them. Organizations that depend too much on a single visible security measure often overlook early warning signs and vulnerabilities that could have prevented the incident altogether.

Where Many Armed Security Programs Fail

The main mistake is viewing armed security as the only solution instead of just one part of a broader protection approach. Effective safety—especially in places like houses of worship—is not based on a single layer but on well-established, fundamental protection-in-depth principles, including:

• Early detection of suspicious behavior

• Thoughtful control of access points

• Intelligent use of surveillance and analytics

• Trained staff and volunteers who understand what to look for

• Clear response protocols

Within that structure, armed security—if used—becomes a precise tool, not a theatrical or potentially dangerous fix.

Contact Us

A More Sophisticated Approach

For organizations that decide armed protection is needed, the most effective measures are rarely the most obvious. They are:

• Discreet rather than overt

• Highly trained rather than minimally qualified

• Integrated rather than standalone

In upscale settings, the goal isn’t to show strength—it’s to create safety without disrupting the worship service or experience. Congregants should feel secure, not watched. Protected, not policed.

So—Should Houses of Worship Use Armed Security?

Sometimes. But not by default—and never as a sole solution.

Armed security makes sense when it is:

• Based on a clear understanding of risk

• Supported by a broader, layered security strategy

• Executed by qualified professionals with appropriate oversight

• Aligned with the culture and expectations of the congregation

Without those elements, it becomes a visible solution to an unseen problem—and often an incomplete one.

Final Thought

The purpose of a house of worship is not security. However, without security, that purpose is at risk.

The goal, then, is not to turn sacred spaces into fortified places — but to protect them carefully and intentionally, without losing what makes them sacred in the first place.

Considering armed security for your organization?

Before making a decision, ensure your approach is based on an objective risk assessment that clearly identifies and prioritizes threats and vulnerabilities—rather than on assumptions, sales commission-driven suggestions, or the vendor’s highest-margin solution.

Reach out for a confidential, independent assessment tailored to your specific environment at info@s6rg.net

Contact Us

Visit Us

Digital Twins for Security: How We Model Risk as Step One

Modern physical security depends on more than static drawings, checklists, or “guesstimates.” The sites we safeguard—commercial locations and campuses, industrial and logistics facilities, critical infrastructure, luxury homes and estates—are exposed to complex, dynamic, and changing threats.

S6RG tackles this complexity through digital twin modeling: high-resolution virtual copies of real environments that enable precise analysis and security requirements and improvements.

Digital twins allow us to visualize risk, simulate threats, and design protection systems before real-world implementation—and make adjustments as threats evolve.

Subscribe now

What is a Digital Twin?

A digital twin is a precise digital representation mirroring a physical environment’s geometry, structure, and operations.

Unlike traditional images or architectural drawings, a digital twin is three-dimensional, georeferenced to exact coordinates, interactive, measurable, and continuously usable for analysis and simulation. It becomes a living, analytical model of a property or facility.

Within the digital twin, we can measure distances, simulate camera and lighting coverage, analyze lines of sight, evaluate vehicle access and pedestrian routes, study perimeter vulnerabilities, design AI-powered video analytics, test response strategies, and establish security infrastructure requirements.

In practical terms, it allows us to build security programs that address the entire risk spectrum—rather than relying on assumptions.

How S6RG Creates Digital Twins

Creating a high-fidelity digital twin requires detailed images and measurements from both aerial and ground perspectives, captured using drones and advanced imaging systems.

Aerial Data Capture

We use enterprise-grade drones with high-resolution imaging systems to capture aerial images of each site.

These flights produce highly detailed orthomosaic maps, elevation models, terrain data, and accurate representations of structures, access routes, and perimeters. This allows us to precisely understand how a property is laid out—its boundaries, elevation changes, vegetation, approach routes, and surrounding environment.

This aerial layer forms the structural framework of the digital twin.

Ground-Level Data Capture

Aerial imagery alone does not reveal how a site functions from the perspective of an intruder, employee, visitor, or security officer.

To capture this essential viewpoint, we collect high-resolution ground imagery, including ultra-high-definition photography, structured photogrammetry, 360-degree photos and video, and walkthrough imaging of both interior and exterior spaces.

This enables us to accurately reconstruct entrances, exits, lighting conditions, landscape features, concealment areas, blind spots, and real-world movement patterns throughout the property.

Combined with aerial data, this produces a complete and highly accurate three-dimensional environment.

Visit S6RG

The Digital Twin Model

All captured data is processed using photogrammetry and 3D modeling software to create a navigable digital replica of the site.

The result is an interactive environment where we can move through the property virtually, examine structures and terrain in detail, measure distances and elevations, analyze visibility and obstructions, and evaluate access control points and lighting conditions.

This model becomes the foundation for security engineering and analysis.

How We Use Digital Twins for Security Modeling

The value of a digital twin lies not in visualization alone, but in how it enables detailed analysis and informed decision-making.

Line-of-Sight and Surveillance Analysis

Camera placement is often misunderstood in security planning. Within the digital twin, we can accurately evaluate coverage, identify blind spots, account for obstructions, and determine realistic detection and identification distances under actual lighting conditions.

This allows surveillance systems to be designed based on measurable performance rather than assumptions.

Intrusion Path Analysis

Digital twins allow us to study a property from an adversary’s perspective. We can identify concealed approaches, areas shielded from view, terrain that provides cover, and access points that may otherwise go unnoticed.

By uncovering these vulnerabilities in the model, we are able to design countermeasures before they become real-world risks.

Subscribe now

Perimeter Protection Modeling

Effective perimeter protection requires a detailed understanding of how barriers, gates, lighting, and approach paths interact.

Using the digital twin, we evaluate whether a perimeter is truly capable of deterring, detecting, and defending against intrusion, rather than simply appearing secure.

Remote Guarding and RSOC Integration

Digital twins are also instrumental in designing remote guarding programs and security operations.

They allow us to determine optimal camera placement, define detection zones, evaluate how and where audio intervention should occur, plan patrol routes, and configure AI-driven analytics.

This ensures remote monitoring systems are not just installed—but engineered for effectiveness.

Incident Simulation and Response Planning

One of the most powerful uses of digital twins is the ability to simulate real-world scenarios.

We can model how a site would respond to intrusions, vehicle breaches, unauthorized access, and other incidents. This allows us to refine response procedures, improve timing, and align personnel and technology before an event ever occurs.

Organizations are therefore able to strengthen resilience proactively, rather than reactively.

Subscribe now

Security Program Visualization

Digital twins also provide a far more effective way to communicate security strategies.

Rather than relying on reports or diagrams, clients can see their security program within the digital environment itself—how cameras are positioned, how perimeters function, how zones are structured, and how threats may approach.

This clarity improves decision-making, supports investment strategies, and builds confidence in the overall program.

Why Digital Twins Matter in Modern Security

Most security failures are not caused by a lack of equipment, but by poor planning, incomplete understanding of the environment, and incorrect assumptions about risk.

Digital twins reduce these uncertainties by allowing environments to be studied in detail, vulnerabilities to be identified early, and strategies to be tested before implementation.

This shifts security from reactive decision-making to proactive, engineered risk management.

The Future of Physical Security Modeling

As imaging, AI, and remote monitoring continue to advance, digital twins are becoming the foundation of how modern security programs are designed, implemented, and managed. At S6RG, we are not following this shift—we are driving it, leveraging state-of-the-art imaging, modeling, and analytical capabilities to engineer security with precision.

This is the future of physical risk and resilience engineering—where environments are understood before they are secured, and strategies are proven before they are deployed.

Partner with S6RG to design a security program built on intelligence, precision, and foresight.

Visit S6RG

Subscribe now

Here’s a question most executives never ask:

If something serious happened tonight, would your security program stop it — or would it simply document the failure tomorrow morning?

Most organizations don’t buy security. They buy reassurance.

A uniform at the gate. A patrol vehicle is in the lot. A clipboard. A flashlight. A sign-in sheet. Someone visible.

It looks responsible. It feels responsible. It photographs well after an incident. But appearance is not performance. And in today’s legal and insurance environment, performance is the only thing that matters.

The Comfort Trap

The traditional guard model persists because it’s familiar. It has existed for decades. It’s easy to explain to a board: “We have a guard on nights.”

But familiarity does not equal effectiveness.

Ask the harder questions: What is the measurable detection capability of your current security program? How quickly would a perimeter breach be identified? How long would it take to interrupt it? Who validates alerts? How is performance documented? Who reviews it?

In most guard contracts, those questions are undefined — because the program was never engineered around detection and interruption in the first place. It was engineered around staffing.

Meanwhile, the organization pays $80,000 to $120,000 per security post. One individual is expected to monitor cameras, patrol acres of property, maintain awareness across multiple access points, and respond instantly wherever needed.

That expectation ignores a simple reality: one person cannot be everywhere at once.

The limitation is structural, not personal.

Yet when incidents occur, the explanations are predictable. The guard was on the other side of the property. The event happened between patrol cycles. There was no structured escalation protocol. The documentation is thin.

The invoice, however, is never thin.

The Math Doesn’t Work

Security is constrained by physics.

A single guard cannot simultaneously maintain awareness across multiple zones, detect anomalies in real time, and intervene instantly across a large facility. Human attention is limited. Patrol routes are predictable. Blind spots remain blind. Bad guys understand this.

What looks like “coverage” is often intermittent visibility. And intermittent visibility is not a

control strategy.

Subscribe now

What Courts Actually Examine

After an incident, the conversation shifts immediately. The question is no longer whether you had security. The question becomes whether your security program was reasonable given the foreseeable risk.

Foreseeability assesses whether the incident type was predictable given your property, industry, geography, or history. Reasonableness examines whether your controls were proportionate and structured.

Was protection engineered? Were interruption timelines defined? Was the documentation structured and reviewable? Was there governance and supervision?

A guard on-site does not automatically meet those standards. A static post order does not demonstrate structured risk management. Unverified patrol logs do not establish oversight.

If your defense is “We had a guard,” you are relying on optics — not structure. Optics collapse under scrutiny.

The Insurance Reality

Insurance carriers have evolved.

Underwriters now look beyond presence and into maturity. They assess whether monitoring is active or passive, whether analytics support detection, whether alarms are validated before dispatch, and whether incidents are documented in a standardized way.

Premiums reflect risk sophistication. So do deductibles, exclusions, and renewals.

Security programs that cannot articulate their detection and interruption capabilities are increasingly viewed as ornamental — expensive, but not protective.

Ornamental security does not reduce exposure.

What Engineered Security Actually Means

Real security is not more guards. It is not more cameras. It is not louder alarms.

It is structured.

Engineered security begins with intentional design. Detection zones are defined. Camera placement aligns with function. Analytics help identify anomalies rather than relying on chance observation. Alerts are validated by trained operators. Escalation protocols are predetermined. Interventions are timestamped. Documentation is consistent and auditable. Performance is reviewed.

This transforms security from a staffing model into a performance system.

Detection becomes continuous rather than intermittent. Interruption becomes defined rather than improvised. Documentation becomes defensible rather than anecdotal.

Most importantly, governance becomes real rather than assumed.

The Hard Questions

If you removed your onsite guard tomorrow, would your detection capability materially decline? Would interruption timelines meaningfully increase? Would documentation quality collapse?

If the honest answer is “not significantly,” then you are not buying protection. You are buying comfort. And comfort does not survive litigation.

The Strategic Shift

The future of physical security is not a choice between people and technology. It is the disciplined integration of both.

The most effective model is a structured onsite program supported by a state-of-the-art Remote Security Operations Center.

The onsite team provides physical presence and immediate intervention capability. But that presence no longer operates in isolation. It is supervised, validated, and reinforced in real time by centralized detection, analytics, escalation control, and audit-grade documentation.

An advanced RSOC eliminates blind spots by maintaining simultaneous awareness across the property. It reduces dependence on random patrol timing and replaces it with structured detection. It enforces response standards. It records actions. It provides measurable oversight.

Together, a governed onsite program and a modern RSOC create layered protection that is continuous, defensible, and aligned with foreseeable risk.

This is not security theater. It is engineered risk management.

Organizations that make this shift don’t merely “have security.” They operate a security system capable of withstanding operational stress, underwriting review, and legal examination.

Those who do not will continue paying for appearance until appearance proves insufficient.

Security is no longer about standing watch or staffing a post. It is about designing a system that works. The organizations that understand this distinction will lead operationally, financially, and legally.

Subscribe now

Share

Hangar Queens’: Congressional Hearing Reveals Osprey Readiness Rates Declining as Mishaps Increase

Subscribe now

The V-22 Osprey represents one of the longest and most troubled aircraft acquisition programs in modern U.S. military history. Conceived in the early 1980s, the platform required 24 years of development before the Marine Corps declared it operational in 2007. Even then, it entered service amid unresolved technical concerns and a safety record that had already claimed lives during testing.

Nearly two decades after achieving initial operational capability, the aircraft continues to struggle with readiness, reliability, and even finding a clear mission. Recent congressional testimony highlighted declining mission-capable rates and an increase in serious mishaps across variants. Despite incremental upgrades and mitigation measures, Navy and Marine Corps officials acknowledge that it may not achieve full mission capability until approximately 2033.

If that timeline holds, the V-22 will not reach true operational maturity until 50 years after its inception.

A half-century development arc for a tactical military aircraft is not a mark of innovation — it is a warning sign. Platforms entrusted with operational crews must demonstrate sustained reliability, acceptable mishap rates, and consistent full mission capability. The V-22 has struggled to meet those standards. Low FMC rates combined with a history of fatal accidents raise legitimate questions about whether the aircraft has ever fully achieved the maturity implied by its “fleet-ready” designation.

Regardless of the control measures currently in place, continued routine deployment of a platform with persistent readiness shortfalls and elevated mishap rates demands serious reconsideration. At a minimum, the aircraft should be withdrawn from full operational tasking until it demonstrates measurable, sustained improvements in safety, reliability, and maintainability.

Subscribe now

More fundamentally, the Department of Defense should evaluate whether continuing to repair a five-decade program incrementally is strategically sound — or whether it would be more responsible to pursue a clean-sheet tilt-rotor design built under modern engineering, modeling, and program governance standards.

As a former Navy pilot and a commercially rated pilot in both fixed- and rotary-wing aircraft, I appreciate the technical ambition behind the Osprey. It is an extraordinary concept, and I’d love to fly it. But operational military aviation is not about concepts; it is about a sober, responsible balance of mission, readiness, and operational risk management. In its current and projected state, the V-22 does not justify the ongoing risk to crews or the additional financial burden required to sustain it.

Innovation is essential. But it must be accountable, disciplined, and demonstrably safe before it is relied upon in combat operations. On that measure, the V-22 still has not proven itself and likely never will.

Share

Share

If insurers were confident that physical security improvements reduced legal and financial exposure, they would reward them, and courts would not so routinely examine security programs under premises liability and negligent security standards after an incident.

Instead, premiums rarely decline, and post-incident litigation almost always centers on foreseeability - Was the risk foreseeable? Were the threats and vulnerabilities methodically and thoroughly assessed? Were reasonable countermeasures implemented in advance?

Too often, the answer is no.

The reason is simple: most security “upgrades” are not the result of a detailed assessment, thoughtful planning, and disciplined security modeling.

They are often ad hoc, reactive, generic, and poorly aligned with actual threats and vulnerabilities, as well as with how attackers may behave when exploiting them.

Applying game theory forces security planning to model adversaries as decision-makers, evaluate threat vectors, and justify control selection using measurable performance outcomes - before something happens.

Subscribe now

Attackers Don’t See Checklists - They See Systems

Security programs are often built as static checklists: Add cameras, fencing, gates, guards, maybe a few guns, and perhaps even a dog or two.

Attackers don’t view security that way. They see it as a system - one they can observe, probe, test, and adapt to, and eventually exploit, over time. This is precisely why physical security modeling exists: to evaluate how detection, delay, and response interact along realistic attack pathways.

From an attacker’s perspective, the calculation is straightforward:

• How valuable is the target?

• How likely am I to be detected?

• How long before anyone responds?

• What happens if I’m interrupted?

• Can I escape or adapt?

Game theory, combined with security modeling, formalizes mitigation selection, design, and implementation by using quantitative metrics rather than assumptions.

Security Is Rarely a One-Move Problem

Most incidents don’t begin with a breach. Even unsophisticated attackers often follow a pattern: an often-repeated cycle of probing, testing response times, watching patrol behavior, identifying blind spots, and making repeated low-risk attempts.

If patrols are predictable, cameras static, and responses consistent, attackers learn faster than defenders adapt. Over time, the attacker’s probability of success increases—even if no single control has “failed.”

To help counter this, serious security design should, along each identified threat vector, evaluate:

• Probability of Interruption (PI): the likelihood that an attacker is detected and stopped before reaching the target

• Probability of Neutralization (PN): the likelihood that response forces can successfully stop the attacker once interrupted

Without modeling PI and PN, security decisions are largely guesswork.

Predictability Is the Real Vulnerability

If an attacker can confidently answer:

• Which cameras are actively monitored?

• How long does the response take?

• When guards pass a given point?

• Which alarms are ignored?

Deterrence has already failed.

Game-theoretic planning introduces controlled unpredictability—randomized patrol routes, overlapping and shifting detection coverage, non-deterministic response workflows—specifically to degrade the attacker’s ability to estimate PI and PN. When attackers cannot reliably predict interruptions or neutralization, the expected payoff-to-risk ratio drops, reducing the likelihood they’ll act.

Security Signaling Shapes Behavior

In both game theory and physical security modeling, signals matter. Lighting quality, visible cameras, response speed, system redundancy, and visible coordination all communicate information to attackers.

Strong signaling increases perceived system effectiveness- the combined performance of detection, delay, and response across likely attack paths. Weak signaling invites testing and escalation.

Attackers continuously interpret these signals, whether defenders acknowledge it or not.

AI-powered Remote Guarding Solutions are a Strategic System

Remote guarding environments are especially well-suited to game-theoretic and model-driven design.

Attackers don’t just test the site—they test the technical effectiveness of the analytics and the operational effectiveness of the Remote Security Operations Center (RSOC):

• Which alerts are ignored?

• When escalation occurs?

• Do responses vary?

• How quickly does human intervention follow detection?

An effective and resilient RSOC uses modeling to adapt dynamically:

• Treating repeated alerts as intelligence

• Adjusting response timing and style

• Increasing PI through layered detection

• Improving PN through faster, better-coordinated escalation

Without this, AI becomes useless, and remote guarding becomes reactive theater - impressive on paper, weak in practice.

Why This Matters for Liability and Duty of Care Compliance

A thorough post-incident analysis will go well beyond the basics of cameras, access control systems, and procedures. It will probe deep into an organization’s security programs, polices, procedures, and controls, and seek to understand the mindset behind the strategy:

• Were the threats and vulnerabilities properly assessed, modeled, and prioritized?

• Did management understand the foreseeable risks?

• Were reasonable countermeasures deployed to mitigate the risk?

Physical security modeling—supported by game-theoretic thinking—demonstrates:

• Foreseeability grounded in attacker decision modeling

• Rational resource allocation

• Measurable system effectiveness

• Intentional design to maximize PI and PN

That matters in court. It matters to insurers. Long before an incident occurs.

Subscribe now

The Bottom Line

Physical security is not static. Threats are not random. Attackers are not usually stupid.

Security is a complex game, played continuously by intelligent actors on both sides.

Organizations that rely on hardware plus hope will keep losing - slowly, quietly, and expensively.

Organizations that apply physical security modeling, measure performance, and think strategically make the first move in creating an effective, efficient, dynamic, and long-lasting physical security program.

S6RG is at the forefront of modern physical security modeling—applying rigorous, game-theoretic risk analysis to real-world environments using proven methodologies, validated performance metrics, and state-of-the-art AI-enabled technologies. We help clients move beyond reactive security toward measurable system effectiveness, defensible decision-making, and true risk reduction. If you are ready to treat physical security as a strategic discipline rather than a checklist, contact us at info@s6rg.net

Share

Subscribe now

The recent fatal shooting at a Northrop Grumman facility in Maryland is a tragedy — and it is also another warning.

Shooting at Northrop Grumman facility in Maryland leaves security guard dead: Police

According to reports, a contracted security guard fatally shot a fellow guard during an internal dispute while on duty. This was not an external attack, an active shooter event, or a perimeter breach. It was violence originating from inside the on-site security program.

Both individuals were employed by a large, nationally recognized contract security provider — a detail that should unsettle anyone who assumes big name and national automatically equals high quality and low risk. It doesn’t.

The fact that Northrup Grumman allowed such low-quality guards on such a sensitive site raises serious concerns about the quality of their security program and their ability to meet not just their national security obligations, but also their duty of care obligations to their employees and anyone else allowed on-site.

The Dangerous Assumption: Armed = Safer

Many organizations, particularly large corporate and government-adjacent facilities, believe armed guards mitigate risk. In reality, they only reduce risk when they are highly vetted, well-trained, properly supervised, and professionally compensated. Most contract armed guards in the U.S. meet none of those criteria.

Across the private security industry, especially among large providers like Allied Universal, the business model is built on scale, speed, and cost control—not elite capability. The result is almost predictable.

Allied, in particular, with its debt-fueled growth by acquisition over the last decade, has been forced to gut its middle management team just to service the debt, with little, if anything, directed to improving its operations or services.

The Reality of the Contract Armed Guards

Most armed guards working under large contracts today are:

• Minimally qualified – meeting only the lowest state licensing standards

• Barely vetted – limited background checks, minimal psychological screening

• Undertrained – often receiving far more firearms instruction than conflict-management or de-escalation training

• Low-paid – wages that attract high turnover, not seasoned professionals

This is not speculation. It’s based on experience and is widely documented across the industry and confirmed by litigation, regulatory actions, and investigative reporting over the past decade.

When you place a firearm in the hands of someone with limited maturity, weak supervision, and poor conflict-resolution skills, you are not mitigating risk — you are introducing a volatile variable into your environment.

When Security Staff Become the Threat

The Northrop Grumman incident underscores a critical but often ignored truth:

Most security failures are internal, not external – Poor hiring, poor training, poor operations, and poor supervision.

This shooting did not occur because a guard was overwhelmed by an attacker. It occurred during an internal dispute — reportedly connected to job performance and supervision.

That should immediately raise questions about:

• Supervisory competence

• Emotional screening and stability

• Weapon retention and escalation thresholds

• Command-and-control oversight

If a routine workplace interaction can escalate into lethal force between armed guards, the problem is not the individual alone — it is the system that put them there.

Armed Guard Programs Increase Liability When Poorly Designed and Managed.

From a risk and liability perspective, poorly designed armed guarding programs create:

• Higher probability of negligent discharge

• Greater exposure to wrongful death and civil litigation

• Severe reputational damage

• Long-term insurance and underwriting consequences

Courts and insurers increasingly view armed guards not as effective risk mitigation but as high-risk operations that increase the demands on site management. When that additional management is missing, liability increases, not decreases.

The Hard Truth for Security Buyers

Large organizations often outsource security to “transfer risk.” In practice, they frequently retain an increased risk while losing control of quality.

Hiring armed guards because they are “required,” “expected,” or “industry standard” — without considering qualifications, training, supervision, compensation, and security protocols — is a mistake.

Effective security extends well beyond mere optics, and it is not about uniforms or firearms. And it is certainly not about lowest-bid contracts.

Questions to Ask before Hiring Armed Guards

When considering hiring armed guards for a site, an organization should ask itself:

• Are they truly necessary for our threat profile?

• Are they professionally screened and supervised?

• Are they paid and trained at a level commensurate with lethal authority?

• Would alternative controls reduce risk more effectively?

In many environments, the answer may be uncomfortable — but obvious.

Final Thought

The Northrop Grumman shooting should not be dismissed as an anomaly. It should be treated as a case study of how security programs can become the very risks they were meant to prevent.

When armed security is built on low wages, minimal qualifications, and thin oversight, it doesn’t protect people or facilities.

It endangers them.

In the immediate aftermath of the December 13 shooting at Brown University, a familiar and troubling narrative surfaced across media, social platforms, and security industry forums:

• Brown University is to blame

• The shooting was the result of left-wing politics and DEI

• Brown has blood on its hands

These claims were not only inappropriate in timing but also intellectually lazy and professionally irresponsible. More importantly, they reveal a deeper and more uncomfortable truth:

The modern security industry continues to fail many of the institutions it claims to protect.

Brown’s Security Was Weak — But That Is the Norm, Not the Exception

Brown University’s security posture was indeed fragmented and uneven.

It is also true of most colleges, universities, schools, healthcare systems, and large commercial campuses in the United States.

These organizations are required to balance competing and often conflicting demands, including:

• Privacy and civil liberties

• FERPA and state-level compliance obligations

• Institutional culture, openness, and aesthetics

• Budget constraints and risk tolerance

But they rarely receive from the security industry are complete, compliant, and operationally realistic designs that respect these constraints while materially reducing risk, or recommendations based on careful analysis of specific threats and vulnerabilities.

As a result, security programs are often fragmented and ad-hoc - implemented in pieces - cameras here, guards there, policies written but not operationalized, creating gaps, inconsistencies, and false confidence.

This is not an organizational failure. It is a design failure bordering on professional negligence by self-proclaimed security professionals.

The Industry’s Expertise Gap

Many of these professionals lack meaningful experience in:

• Enterprise risk management

• Governance and accountability structures

• Privacy and regulatory compliance

• Executive decision-making and institutional politics

Instead of delivering integrated solutions, aligned policies, procedures, controls, and enabling technologies, the industry too often defaults to simplistic solutions or ideological arguments. When those solutions fail, blame is redirected at the client, targets, or victims.

Universities Are Not Law Enforcement — and Never Will Be

One of the loudest post-incident demands following the Brown shooting was that the university should have directly integrated its systems with the Providence Police Department’s Real-Time Crime Center (RTCC). At a distance, this sounds reasonable.
In practice, it rarely is.

Continuous, direct integration between a university and a municipal RTCC raises serious and often prohibitive challenges:

• Governance: Who controls cameras, analytics, alerts, access logs, and retention policies?

• Privacy & Compliance: FERPA, state privacy laws, institutional policy, and constitutional considerations apply

• Scope Creep: Incident response can quietly become persistent, unwarranted surveillance

• Mission Misalignment: Police RTCCs are not designed to support academic freedom or campus life

• Operational Reality: Many RTCCs lack the staffing or structure to manage campus-scale feeds

For many universities and similarly situated institutions, direct RTCC integration is legally complex, politically untenable, and operationally mismatched.

“Just Connect Everything to the Police” Is Not a Strategy

Telling an institution to “hand everything over to law enforcement” is not a security strategy - it is abdication.

Security professionals are expected to design solutions within constraints, not attack clients for having them. Ignoring privacy, governance, and compliance realities does not make them disappear. It simply guarantees failure.

The Industry Keeps Offering Extremes Instead of Architecture

Effective security does not live at the extremes. It is not total, unchecked surveillance with unlimited law enforcement access, nor is it idealistic hands-off minimalism that ignores real threats

Professional security is an architectural discipline, built on a balance of policy, procedures, controls, technology, and governance that are all aligned, proportional, measured, and accountable.

“Brown Has Blood on Its Hands” Is a Professional Failure

This claim is not an analysis, and it’s not professional. It is moral grandstanding.

It shifts attention away from systemic shortcomings and onto institutions operating under real-world constraints.

Professionals do not accuse clients of murder after incidents. They investigate, learn, redesign, and improve. Anything else is attention-seeking theater.

Accountability Starts With the Security Industry

If the frameworks failed, the industry failed. Blaming politics, culture, or compliance requirements avoids a harder truth: Security programs remain fragmented and reactive because the industry has not matured into a true risk management profession.

The path forward must include:

• Integrated risk management frameworks

• Privacy-respecting, compliant system design

• Event-driven—not continuous—law enforcement collaboration

• Professional governance and accountability

And critically, it must include a solution that the industry consistently ignores.

The Missing Middle: Professionally Governed Private RSOCs

What the security industry largely overlooks is the missing middle: the professionally governed, certified private Remote Security Operations Center (RSOC).

An RSOC is not a call center. It is not a guard dispatch desk. And it is not a shadow law enforcement unit.

A properly designed RSOC is a risk management control layer, purpose-built to operate within legal, privacy, and governance constraints while materially improving detection, assessment, and response.

When implemented correctly, a private RSOC can:

• Provide real-time situational awareness without surrendering institutional control

• Apply analytics, triage, and escalation logic aligned with institutional policy and risk tolerance

• Enforce privacy-by-design controls, including access limitations, retention policies, and auditability

• Serve as a governance buffer between institutional systems and law enforcement

• Enable event-based, policy-driven law enforcement integration when thresholds are met

This model acknowledges a critical reality: Most institutions do not want continuous law enforcement access to their systems, but they do want rapid, professional escalation when it matters.

RSOCs solve this by acting as an intermediate risk authority—one that understands institutional policy, legal exposure, and operational realities while still supporting effective emergency response.

The Real Lesson from Brown University

Brown University shooting should not be treated as a political symbol or a marketing opportunity. It should be a case study of what happens when institutions are given unrealistic solutions based on generalized assumptions rather than practical, workable, specific solutions.

Universities are not law enforcement agencies. Security professionals are not law enforcement officers. Our role is risk management and prevention. If someone is reacting, it means the security industry failed.

This means designing systems that prevent harm, respect rights, and function under real-world legal, cultural, and operational constraints.

If the security industry wants fewer tragedies, security professionals and experts must stop jumping online or even on TV to point fingers and start delivering solutions that actually work.

Once reliant on static guards and local alarms, modern security programs now integrate advanced sensors, video analytics, and Remote Security Operations Centers (RSOCs) that provide real-time monitoring and response.

Remote guarding has significantly improved basic physical security, but adoption in more complex environments remains inconsistent. This is often due to noncompliant, ad hoc operations centers that increase risk. However, this trend is shifting, and we are leading this transformation.

Not all RSOCs offer the same level of quality, compliance, privacy, or effectiveness.

An attractive website or low price does not ensure compliance, capability, or trustworthiness. In high-risk or high-value settings such as luxury estates, commercial properties, industrial sites, or regulated infrastructure, a poorly managed RSOC can increase liability and risk.

If you are considering remote guarding for your security program, whether simple or complex, look for these RSOC features to enhance protection, reduce risk, and control costs:

1. Governance, Compliance & Accreditation

A credible RSOC operates within a formalized governance framework that ensures legal compliance, data protection, and operational discipline.

Key Elements:

Regulatory Compliance (where applicable):

• Kari’s Law and RAY BAUM’s Act compliance for emergency calling and location accuracy.

• NG911 readiness and integration for faster emergency dispatch.

• Privacy regulations (GDPR, HIPAA, state privacy laws).

• UL standards such as UL 827 (Monitoring Stations) and UL 2900-2-3 (Cybersecurity).

• For critical infrastructure: MTSA, TWIC, or other sector-specific mandates.

Third-Party Accreditation:

• UL certification (827A or 1981 for video monitoring).

• ISO 27001 or SOC 2 compliance for information security.

• Participation in recognized industry bodies (e.g., TMA, SIA)

Written Policies & SOPs:

• Documentation on data retention, incident reporting, escalation paths, and chain of custody for evidence.

• Regular third-party audits or internal compliance reviews.

Pro Tip: Ask to see proof of certification - not just a marketing claim. A legitimate RSOC should be able to provide a current certificate or audit summary.

2. Infrastructure Resilience & Redundancy

RSOCs must function as critical facilities. A credible center maintains layered redundancy to ensure continuous monitoring during power, network, or environmental disruptions.

Key Elements:

Physical Facility:

• Hardened building envelope with controlled access.

• Redundant power (UPS + generator).

• Redundant fiber or satellite connectivity (e.g., Starlink backup).

• Fire suppression, HVAC redundancy, and environmental monitoring.

Technical Infrastructure:

• Dual or distributed RSOCs (geo-redundancy).

• Hot failover capabilities for uninterrupted operations.

• Secure cloud architecture with zero-trust access control.

Operational Resilience:

• Documented business continuity and disaster recovery plans.

• Regular failover testing and incident simulations.

Pro Tip: A reliable RSOC should never lose operational capability. Ask how they manage catastrophic failures at their primary facility.

3. Cybersecurity and Data Protection

Remote guarding relies on sensitive video streams, control systems, and personal data. A breach may result in litigation, reputational harm, or physical security risks.

Key Elements:

• Secure Networks: Encrypted video and data transmission (TLS 1.2 or higher), segmented networks, intrusion detection systems.

• Identity Management: MFA for all operators, role-based access, strong credentialing.

• Cyber Certification: UL 2900-2-3 or SOC 2 Type II audits, SIEM monitoring.

• Incident Response: Defined protocols for cyber incidents, regular penetration testing, and third-party audits.

Pro Tip: A simple statement such as “We have firewalls” is insufficient. Ask about UL 2900-2-3 certification and review their cybersecurity incident response plan.

4. Technology Stack and Interoperability

An RSOC’s effectiveness relies on its ability to integrate, analyze, and act on data from multiple sources, such as cameras, sensors, alarms, access control systems, drones, and AI.

Key Elements:

• Open Architecture: Ability to integrate with various VMS/PSIM/ACS platforms.

• AI & Video Analytics: Behavior analysis, perimeter detection, thermal, and object classification.

• Interoperability: AVS-01 compliance for standardizing alarm signals.

• Remote Access & Control: Secure operator control of PTZ cameras, intercoms, and gates.

Pro Tip: Ask for a live demonstration with your site’s actual systems, not just a canned demo environment.

5. Human Capital: Training, Vetting, and Culture

Technology is only as effective as the people who operate it. RSOC operators must be highly trained, thoroughly vetted, and supported by strong leadership and quality assurance programs.

Key Elements:

• Vetting: Background checks, drug screening, and security clearances where applicable.

• Training: AVS-01 operational readiness, de-escalation tactics, emergency communications, situational awareness.

• Ongoing Professional Development: Regular refresher training and scenario-based exercises.

• Culture: Low turnover, professional demeanor, and well-defined leadership structure.

Pro Tip: Ask about their operator-to-supervisor ratio and QA program. High turnover is a red flag.

6. Monitoring, Detection, and Response Protocols

A modern RSOC does more than passively monitor cameras. It implements structured, escalating response protocols.

Key Elements:

• Proactive Monitoring: Real-time alerts, AI-assisted detection, geofenced trigger zones.

• Response Playbooks: SOPs for incidents—intrusion, trespass, fire, vehicle theft, loitering, etc.

• Integrated Communications: Direct links to law enforcement, private responders, or on-site personnel.

• Documentation: Automated incident reports, audit trails, and evidentiary-quality recordings.

Pro Tip: Evaluate their response time targets and escalation protocols. Request a review of recent anonymized incident logs.

7. Compliance with Privacy, Liability & Legal Considerations

An inadequately managed RSOC can expose clients to significant legal risk. Ensure their program aligns with privacy regulations and evidentiary standards.

Key Elements:

• Privacy Protection: Compliance with state privacy laws, proper signage, and masking of sensitive areas.

• Evidence Handling: Secure storage, chain of custody protocols, legal review readiness.

• Insurance & Indemnification: Errors and omissions (E&O), cyber liability, professional liability.

Pro Tip: Require written evidence-handling policies and ensure their insurance covers RSOC operator actions.

8. Client Integration, Reporting, and Transparency

An RSOC should operate as an extension of your security program, providing transparency rather than operating as a black box.

Key Elements:

• Client Portal: Real-time status dashboards, incident logs, and reporting.

• Customizable Escalation: Ability to tailor who gets called and when.

• Reporting Cadence: Daily, weekly, and monthly summaries with trend analysis.

• Transparency: Access to audit trails and video for review.

Pro Tip: A professional RSOC offers transparency and accountability, not excuses.

9. Metrics, QA, and Continuous Improvement

Security is a measurable discipline. The best RSOCs operate with Key Performance Indicators (KPIs) and continuous improvement cycles.

Key Elements:

• Leading Metrics: Alarm response times, detection rates, escalation accuracy.

• Lagging Metrics: Incident closure rates, false alarm reduction, law enforcement response outcomes.

• QA & Audit: Regular internal audits, third-party assessments, mystery incidents.

• Client Feedback Loops: Post-incident reviews and quarterly performance meetings.

Pro Tip: If an RSOC does not track performance metrics, it cannot demonstrate its value.

10. Strategic Fit: Alignment with Your Risk Profile

Even a world-class RSOC may not be suitable if it does not align with your operational, regulatory, or risk requirements.

Key Elements:

• Property or asset type (estate, commercial, regulated site).

• Level of integration needed (on-site responders vs. remote only).

• Regulatory oversight (e.g., MTSA, HIPAA, PCI-DSS).

• Long-term service scalability and flexibility.

Pro Tip: Do not simply purchase a service; build a partnership. Choose a provider whose program evolves with your risk profile.

Conclusion

Remote guarding can significantly enhance security and reduce costs, but only when supported by a professional RSOC. A low-cost, uncertified monitoring center may increase liability and create a false sense of security.

Use this framework to evaluate vendors: request documentation, demonstrations, and evidence rather than relying solely on sales claims.

Ready for a deeper look into Remote Guarding? Contact us at info@s6rg.net

NTSB Finding - Baltimore's Francis Scott Key Bridge

The NTSB’s preliminary findings on the Francis Scott Key Bridge collapse reveal a pattern familiar to anyone who has spent time in operational risk management: most major incidents aren’t caused by exotic design flaws — they result from small, preventable oversights.

According to the investigation, the 984-foot container ship Dali experienced two blackouts after a single loose electrical wire—a wire that wasn’t fully seated in its terminal clamp because of the way it was labeled and banded. That seemingly minor installation issue triggered cascading system failures, loss of propulsion and steering, collision with the bridge, and ultimately the deaths of six workers.

The deeper story isn’t about maritime systems or infrastructure engineering.

Major failures usually come from small things

Risk professionals often focus on high-complexity scenarios, rare events, and sophisticated systems. But history repeatedly shows that large-scale failures usually begin with:

• Wrongly installed minor components

• Missed inspection and lack of supervision

• Rushed maintenance or repairs

• Procedural steps skipped “just this one time”

Complex systems do not need complex failures to fail.

Operations matter as much as, or even more, than design

Even the most resilient designs fall apart if operational practices and maintenance habits are weak. In this case, it wasn’t the ship’s engineering concept that failed — it was execution.

In risk-management language: controls fail at the point they’re least respected, not where they’re most sophisticated.

Risk evolves, but many organizations don’t

The NTSB also highlighted an overlooked factor: the bridge owner had not fully reassessed impact risks despite decades of increasing vessel size.

This is another classic risk-management issue:

• Context changes

• Scale changes

• Operating environments change

• But organizations continue using old assumptions

A risk posture that made sense 20 years ago may be dangerously obsolete today.

The fundamentals still matter most

What this incident reinforces is simple:

• Pay attention to the details

• Build a culture that values discipline

• Validate assumptions regularly

• Treat maintenance and routine procedures as core controls, not afterthoughts

• Recognize that low-probability disasters often originate in high-frequency tasks

Risk management is far less about predicting the future and far more about ensuring the basics are done thoroughly, consistently, and without exception.

A loose wire isn’t just a loose wire

It’s a symbol of how minor oversights can lead to major catastrophes. Whether you manage a team, an organization, a project, or a global operation, the takeaway is the same:

Your risk exposure often lives in the mundane, not the dramatic.

Great risk management is not about brilliance. It’s about a risk mindset - discipline, knowledge, proficiency, humility, and consistent focus on, and execution of, fundamentals.

At S6RG, our philosophy is simple: most organizations — especially SMBs and private-client environments — have never experienced the disciplined, enterprise-grade security frameworks used by Fortune-50 companies. Nor have they leveraged the power of today’s AI-enabled technologies in a way that is meaningful, scalable, or defensible.

We’re changing that.

Drawing on decades of experience in Fortune-100 security programs, global operations, technology, and high-risk environments, we bring elite governance, advanced analysis, and best-practice methodologies to clients who want more than “industry standard.” And we pair that expertise with state-of-the-art AI-powered security technologies — modern video analytics, automated detection, remote guarding workflows, drone-based sensing, integrated communication platforms, and real-time data fusion — to create systems that are not just protective, but predictive.

The result is a new benchmark for security:

Modernized programs that blend the reliability of proven traditional practices with the power, efficiency, and sophistication of next-generation technologies.

This Substack will deliver:

Enterprise-grade thinking designed for real-world environments

Risk models, governance structures, compliance frameworks, and liability-driven design — translated directly from Fortune-100 experience to estates, SMBs, and specialized sites.

AI-powered insights, explained in practical terms

We break down how to deploy analytics that actually work:

DORI-aligned detection, ALPR, object-based tracking, remote guarding rulesets, AVS-01 workflows, drone-enhanced assessments, and integrated PSAP/911 solutions.

The modernization of “old” security systems

Most organizations are operating legacy systems that were never designed for today’s threat landscape. We show you how to integrate AI analytics, modern hardware, intelligent workflows, and innovative operational controls into existing infrastructure — turning outdated systems into force multipliers.

Actionable guidance for immediate impact

Each post gives you one new mental model, checklist, or decision rule you can apply right away. Whether you manage a commercial or industrial site, a residential complex, an estate, own a business, or oversee security operations.

A clear-eyed focus on defensibility and liability

Security is now judged by the “totality of the circumstances,” not by the presence of cameras and guards. We’ll explain how to build programs that stand up to scrutiny and support claims defensibility, duty of care, and operational accountability.

Independent expertise, free from vendor influence

Our guidance is driven by effectiveness, not by what someone is incentivized to sell.

Whether you’re a high-net-worth client, an estate manager, an SMB owner, or a security leader seeking clarity in a crowded and often confusing industry, this Substack will give you unmatched insight into the future of physical security — and how to modernize your environment intelligently and efficiently.

Thank you for stopping by, and please subscribe to make sure you don’t miss a thing.

Let’s redefine what effective security looks like — with the discipline of global standards and best practices, and the power of next-generation AI.

- Patrick Hurley

Founder & CEO S6RG, LLC