OVERVIEW
Securing aviation, maritime, road, rail, and cargo from terrorism and acts of unlawful interference requires a comprehensive approach. We have developed specialised security offerings to help you manage your security.
The Security of Critical Infrastructure Act
The Security of Critical Infrastructure Act (SOCI) now applies to the Transport sector and the Transport Security Amendment (Critical Infrastructure) Bill 2022 (Transport Security Bill) that is currently being proposed is appropriate to all regulated Aviation, Maritime and Air cargo industry participants.
The Transport Security Bill will introduce obligations to:
- Report cyber security incidents
- Identify, and mitigate against, acts of unlawful and operational interference
- Amend security plans and programs including undertaking security risk assessments
- Register Critical Infrastructure Assets
Sector Specialisations
Transport Security Program (TSP)
- TSP quality assurance audit
- TSP health check
- Annual review and risk assessment
- Project plan for the proposed Transport Security Bill
- Security documentation
- Security Officer as a Service (SOaaS) to assist with managing regulatory programs and investigation of security incidents
Aviation Security
- Aviation incident reporting
- Aviation Security Identification Card (ASIC) quality assurance audit
- Regulated Airports
- Passenger Transport operators
- Secure escorting of persons utilising aircraft and airport security zones
- Air Traffic Management System cyber security
Maritime Security
- Passenger Transport and Freighter operators
- Maritime port operators – Regulated port facilities
- Maritime vessel operators – Regulated operators
- Maritime security identification card (MSIC) issuing bodies
Rail Security
- IACS and Rail Standards Maturity assessments (IEC 62443, CLC/TS 50701)
- Implementation of Asset Owner specific standards (TfNSW ASA, RISSB, ARTC etc.)
- Tender/Bid cyber security requirements development and analysis
- Control System Threat Assessments and Systems Assurance
- Physical security assessments of rail control centres, stations and precints
- Staff vetting and insider threat assessments
Cargo Security
- Passenger baggage, screening of persons and screening of air cargo
- Regulated Air Cargo Agents (RACA)
- Accredited Air Cargo Agents (AACA)
- Known Consignor (KC) – originates air cargo allowing cargo to be cleared at origin and ensures secure transportation by a regulated entity
- Enhanced Air Cargo Examination (EACE) Notice holder – Issued to a RACA or RACA Aircraft Operator for prescriptive examination methods required in air cargo
Resilience to Threats
The security of transport systems is an important part of keeping passengers and operators safe from malicious threats.
There are many niche risks, vulnerabilities, and potential dangers that need to be considered when thinking about resilience measures in place on systems such as trains, trams or buses.
We offer a range of security services that cover the spectrum from cyber to physical and personnel. We deliver advice, assurance, and audit services to help with your supply chains, quality assurance, security health checks, foreign interference testing, risk assessments, Transport Security Plans, and more.
Achieve Greater ROI
Our approach to the development of investment plans is based on a deep understanding of both the regulatory and maturity goals of the Transportation sector in the short and long term and is further reinforced by aligning these to current states and meeting relevant standards across industries such as Rail, Maritime and Roads.
When these inputs are developed into capital programs the goals remain clear and traceable and importantly these quality focused engineering approaches found in industries such as Defence and Aerospace are tailored to ensure agility in delivery.
What this approach means for customers that operate in asset heavy industries is that security investments are targeted, measurable and traceable allowing organisations to show and prove that the investment has met its goals with the Anchoram team partnering across the development, delivery and verification.
Opportunities for Increased Revenue
For Transportation operators in franchise models the current changes to Security of Critical Infrastructure (SOCI) Act will compel operators to adhere to the legislation in the same manner as those in a traditional owner/operator model.
This provides opportunities for these franchised operators to value add and uplift operating contracts by offering a plan to ensure compliance across areas such as security tooling, governance, risk management and protective security in line with timeframes set out in the legislation.
Taking a forward position on changes to legislation demonstrates an operator’s commitment to security and provides assurances to asset owners that the risks are being addressed. It also creates opportunities to add security requirement uplifts to operating contracts in order to address any new gaps created by legislation.
Why Anchoram?
Anchoram have capability in strategic planning and advisory services that cover the end to end project lifecycle. Our associates are appropriately qualified with senior practitioners who can help public and private sector organisations with all aspects of protective security. This extends from development of policy and guidance to detailed implementation, frameworks, and processes.
Integrated Security Services
The importance of staying one step ahead of developments in cyber is paramount for security today. Transformative technologies demand constant vigilance to achieve the confidence and resilience necessary for progress.
Penetration testing provides assurance that systems and their respective security controls are working as intended, and are not susceptible to exploitation.
Attack simulations are designed to test the strength of your security mechanisms by simulating an attack on your infrastructure.
Security reviews identify existing vulnerabilities and provide insight into how they may have manifested, as well as determining strategies and techniques to avoid future vulnerabilities.
Operational Technologies like ICS and IoT are both highly specialised and highly targeted, so managing the threats to these systems is essential.
A clear and robust protective security strategy avoids reactive and expensive decisions. Securing your reputation is a key to ensuring both operational and financial prowess.
The security of transport systems is an important part of keeping passengers, operators, and expensive cargo safe from malicious threats. Know your risks.
The Australian Signals Directorate (ASD) administer the Information Security Registered Assessors Program (IRAP) to ensure that entities can access high-quality ICT assessment services. We are experienced and trusted IRAP assessors, fully endorsed under the recently renovated scheme.
INDUSTRY LEAD
Craig Petrie CSC
Lead Partner
Integrated Security
Craig is sought after for his whole of security approach to protective security. With an extensive career in military and law enforcement security, he is internationally qualified and recognised for his service. Having been the Security Manager for a key national security agency he brings a deep understanding of security threats and risks to his clients.
As Lead Partner Integrated Security, Craig leads multi-disciplinary teams in the delivery of security risk management services to clients in government and industry. Experienced in a range of security compliance frameworks he is able to assist clients in meeting security obligations, and uplift their security across the cyber, personnel, and physical policy security domains ensuring organisations and their stakeholders are better protected.
