Tag: #ifma

Facility Managers and Approaches to Security and Cybersecurity in the Modern World

February 25th, 2024
A business wants to always guarantee safety and security for every visitor, staff person, and contractor. We all know that safety and security can be measured through risk factors, and we know that the risk factors for every business whether storefront or digital is more than 0% always.

In todays world, we are beyond the brick and mortar regarding needs for safety and security. We have to consider both hardware and software alongside the balance between a businesses needs/duties and the potential financial crippling state of the art processes and procedures can inflict on a businesses bottom line.

Technology is not cheap. Good technology is exorbitant and typically not reasonable for the common consumer. At the pace of technological evolution comes also the safety and security risks that pair into the common person’s desire to make things more simple, seemingly more comfortable, and always in pursuit of being or becoming more efficient.

Here are some notes in consultation with a DoD representative through the International Facilities Management Association within the Atlanta Chapter.

Security and Cybersecurity Awareness

If, F=function,

Then, Risk= f (vulnerability, threat, asset value, mitigations)…

1. Have a computer on its own system and server if possible for all banking utilizing a two key system for accountability.

2. Do not bank if having multiple emails, multiple apps, or use browsers. Isolate all banking to an isolated system/internet/server.

Notes on General Risk Management:

⁃ Centralize and monitor admin controls. Always consider risk when sharing data outside of network.

⁃ All Risk factors are never 0. The goal should always be risk mitigation.

⁃ ROI is impossible to calculate with accuracy regarding IT, General Security, and General Cyber Security.

⁃ 10-15% is US average cost for IT cybersecurity related expenses. These numbers are assumed to increase over time as the world gets trained beyond average coding capabilities and AI assisted malware development.

Insurance takes clients based on a bet they won’t need it.

Hacking and Financial Risks:
- locking up data for ransom
- Manipulating or destroying data for Political/philosophical/personal attack
- Intelligence collection or payouts
- Create Two Key Systems for approval
- Financial Hacking is a Global Business
- 2023 DoD noted 8 trillion lost in cyber hacking
- Opening unfamiliar emails can be a portal to an entire system
- AI, Automation, and Deep Faking is immensely cost effective and the attacker can be anywhere in the world
- Criminals are lazy. Pay attention to lazy workers seeking unethical ROI
…Tool Makers, Tool Users, and Enablers…

Modern Hacking- the Cyber Kill Chain

1. Reconnaissance- Seeking victims

2. Weaponization- Malware Formation

3. Delivery- point of disruption at PDF/Email Link/Text Message Link/App Downloads

4. Exploitation- Access Granted.

5. Installation- Malware automatically installs itself and hides within a system

6. Command and Control- Data is duplicated and fully compromised

7. Actions on Objectives- Ransom

Information Technology (IT) vs. Operational Technology (OT)

Facility Managers are required and should be trained to operate in both worlds.

Life Safety Systems include all IT, Burglar Alarm Systems, Surveillance Systems, Fire Systems, and all associated hardware.

ICS/SCADA is Gear for Mass Ops.

FYI… Backup Data Frequently and Automatically to Avoid Catastrophe…

1. Schedule Test Security Functions Frequently

2. Imbed Systems for Recurring Ops to interact with systems

3. Protect Family Security and Financial Security with Intentional layers of protection.

4. Frequently remove Toxic Data and set as Recurring Ops (Data Hygiene) either monthly, quarterly, or annually depending on organizations needs.

5. Passwords are obsolete against Passkeys regarding Authentication.

Prompting Operational Directors to Analyze their current Digital Ecosystems for potential hazards and safety risks. Where does Google stand in International Safety, Security, and Corporate Usage for Singularity and Development?

Potential Hazards in Data Manipulation regarding donations. One protection method is flat rate donations as opposed to set percentages. Clean numbers are easier to scan for flags for quick scanning pattern recognition.

(MSSP’s)- Managed Security Service Providers

⁃ Consider Firewalls

⁃ Consider Intrusion Detection Services

⁃ Consider Life Safety and Fire Safety Systems

⁃ Explore Cyber Insurance depending on organizations needs

As Always, God Bless,

James Arthur Ferguson
Recognizing Ecclesiastical Differentials

October 15th, 2023

Recognizing Ecclesiastical Differentials-

One Church with Multiple Locations

1. Liturgical Requirements: Different campuses may have unique liturgical or religious requirements that impact facility management and operational decisions, such as the setup of worship spaces, maintenance of church assets, or scheduling of needed services across all levels of priority.

2. Cultural and Community Considerations: The diverse cultural backgrounds and communities associated with each campus may lead to different facility management priorities and strategies. For example, one campus may prioritize community engagement spaces, while another may focus on community outreach or educational facilities.

3. Leadership Styles: Leadership tactics and approaches to facility management may vary depending on the individuals overseeing each campus. These leaders (Lead Pastors) may adapt strategies based on their interpretation of ecclesiastical principles.

4. Budget Allocation: Allocation of financial resources for facility management and operations may differ among campuses, influenced by their specific needs and priorities.

5. Compliance with Religious Regulations: Some campuses may have specific requirements related to religious regulations or traditions that impact facility management decisions, such as building design, decor, or usage. These things evolve in complexity over time.

In essence, “ecclesiastical differentials” highlight the idea that facility management and operations within any organization with multiple campuses can vary significantly based on the unique ecclesiastical or religious factors associated with each location. This stems from each Lead Pastor being a unique person with unique leadership personality, leadership priorities, and ultimate decision making. Understanding and effectively addressing these differentials is crucial for successful facility management and operations leadership to cater to each individual campus as they continue to evolve.

Also, as our campuses evolve, experience staff turnover and onboarding, and even experience aging of the buildings themselves… there will be a constant tug of war within internal operations on how we best manage each campus. Just as children, each campus is loved fully, and unconditionally, but each campus has completely different needs which only exacerbate with time.

With that, it is immensely important and imperative for us to not forget that we are a family of churches with a shared mission, “To inspire others to follow Jesus”. Competition is the devil’s playground, and our positive outreach towards the communities we have found ourselves in should take the spot forever and always as our main and top priority as we progress into the future.

Let our mission guide us, and let our prayers humble us towards deepening our relationship with God and our congregation’s relationship with God while providing Irresistible Environments where the 500,000+ unchurched army surrounding us can have an opportunity to become churched through our works.

Let it be recognized as a true gift from God to have been handed this opportunity to make such an impact in these strange times!

As always, God Bless,

James Arthur Ferguson

Tag: #ifma

Facility Managers and Approaches to Security and Cybersecurity in the Modern World

Recognizing Ecclesiastical Differentials