Keeping watch on information at Aetna

Oct 1, 1999 12:00 PM, Don Garbera

H.R. Haldeman's comment to John Dean about the Watergate affair could also be an accurate description of why security is important at Aetna Inc. in Hartford, Conn. With more than 48,000 U.S. employees and 15,000 employees in its international affiliates, Aetna is among the world's premier health care companies, and a leading financial services provider. In Aetna's type of business, confidentiality of client information is critical.

Roy Murphy, worldwide senior security executive for Aetna, is responsible for the safety of personnel and company property. He is also responsible for data centers that house confidential information.

Before his current post, Murphy was in charge of security at Aetna U.S. Health Care's Pennsylvania facility. He also has been responsible for security operations at a number of corporations and worked as an operations officer, investigator, and patrol officer for the Lexington, Mass., Police Department.

At various company sites, Murphy resolves security issues, concerns and problems. He also develops policies and procedures and conducts security assessments of Aetna properties. In all endeavors, he works to develop cost-effective security solutions.

KEEPING THE TOOTHPASTE IN THE TUBE Because of the nature of information stored in the data centers, security requirements are extremely high. Recognition Systems Inc. hand geometry readers are used for access into the data centers. The readers take an image of the geometry of an employee's hand, store it in memory, and recall it when the individual needs to gain access to one of the areas. The biometric system interfaces, via a device driver, with a Sensormatic C*CURE 1 Plus card access system that is also used throughout other areas of the Aetna facilities.

At data center main entrances, Horton revolving doors allow access to only one person at a time using card access. If a second person attempts to enter on the same card swipe as the first, a voice alarm sounds, and the revolving door reverses itself and ejects both people.

The centers also incorporate security clearance for each floor. Employees are only allowed access to the required floors for their specific jobs.

Each floor uses an anti-passback feature included in the card, which requires the user to "card-out" when leaving a floor. If an employee fails to swipe his card when leaving, the card will be in passback violation and inoperable to all readers for which the card was originally programmed. To reinstate the card, the employee must visit the security department and explain why the card was not swiped on his way out. The employee's immediate supervisor must also authorize the reinstatement of the card. After a number of violations, displinary action will be taken against the employee.

Internal doors within data centers include a tailgate detection system that detects multiple people entering. Both sides of internal doorways also are monitored by Panasonic CCTV cameras. If a door is forced, held open, or tailgate-violated, the images on the cameras watching both sides of the door are displayed immediately on the call-up monitor in the security control room.

Loading docks within the data centers incorporate interlocks (mantraps), installed by Mosler Inc., which necessitate that a vendor enter a "dead space." The exit door will not open in front of the person until the entrance door is fully closed behind him.

THE REST OF THE STORY Aetna locations throughout Connecticut are linked via a combination of RS-232, network, and dial-up modems. The buildings employ approximately 450 card readers in such areas as common entrance ways, IT setup rooms, smart closets (closets that house voice data equipment), LAN centers, data centers, parking garages, trading floors and a number of specialty areas.

Employee photo identification is also part of the access card system. The cards are made on a C*CURE VISION badging system; and are color-coded according to areas to which an employee has access. Vendors also receive color-coded badges.

Panasonic cameras are used primarily throughout the facilities for indoor monitoring. Outdoor CCTV coverage is provided by Philips Autodomes at some locations. Other locations use Kalatel Cyberdomes. The cameras cover numerous loading docks, parking facilities and high-threat areas such as alleyways.

The control room houses Panasonic and Sony VCRs, Robot MV 96 multiplexers, Kalatel and Burle matrix switchers, International Fiber Systems video data equipment, Sony color monitors, a Stento intercom system that incorporates scream alarms for use in isolated areas, Nice call voice logger, and a Zero Stantron console.

A total of 90 proprietary security officers are stationed at major corporate locations, and carry Motorola HT 1250 radios. They receive 40 hours of training within Aetna's in-house training academy, in addition to on-the-job training. Training includes subjects such as customer service, CPR, blood-born pathogens, patrol procedures, vehicle operation, violence in the workplace, incident reporting, interviewing techniques, managing aggressive behavior, workplace diversity, sexual harassment, and legal law.

Want to use this article? Click here for options!
© 2008 Penton Media Inc.

This month in Access Control

• Opening Up About Door Closers
• An Enterprise Approach
• The Framework For Open Systems
• On A Higher Plane
• More from April's issue