Unified Approach

Nov 1, 2003 12:00 PM, By Corrina Stellitano

Like many large corporations today, First Data Corp., an electronic commerce and payment services provider, requires multiple company divisions to provide its services. With First Data Resources, First Data International, First Data Merchant Services, TeleCheck, eONE Global, Integrated Payment Systems, Western Union, and Orlandi Valuta all under the same umbrella, one would think First Data Corp. would behave like a patient with split personalities. Without a concerted leadership effort, the company could function differently in the multiple branches — creating, from a security standpoint, a rift in the company.

That's why Adam Stanislaus, vice president of physical security for First Data, is pleased with CEO Charles Fote's edict that the Denver-based company is one company united, and all corporate procedures should reflect that principle.

“We have four different operating units, (payment, card issuing, merchant and international) virtually like their own businesses to a point,” Stanislaus says. “Now the CEO has said that everything we do — from security to how we operate as a business — we claim all as one. (This) has really helped me and my department.”

“Previously, for example, we would have one server for each of the four divisions' geographical locations. Now we can have a server for all of the East Coast. We look at things strategically.”

Planning business operations and physical security from a strategic standpoint is mandatory for a corporation as far-reaching as First Data Corp. Although the corporation's global headquarters is located in Denver, the mission of “enabling consumers and businesses to safely and securely pay anyone, anywhere, anytime” means service to more than three million merchant locations, 1,400 card issuers and millions of consumers.

The company has 29,000 worldwide employees and locations in regions including Australia, Canada, China, Germany, Japan, Mexico, the Middle East, the Netherlands, Spain, and the United Kingdom. Through its Western Union and Orlandi Valuta divisions alone, First Data Corp. has 169,000 agent locations in 195 countries and territories — more than double the locations of McDonald's, Burger King, Sears, Wal-Mart, Kmart and Starbucks combined.

For Stanislaus, these statistics form a simple math equation: “It all equates to a lot of work,” he says. Stanislaus came to First Data Corp. by way of a successful client-vendor relationship. For 14 years he worked with the financial corporation as a consultant with Plantation, Fla.-based Security Technologies Group Inc., helping to transition the company from access badges with Polaroid photos to proximity cards with digitally printed photos, in the late 1990s.

In 2001, First Data Corp. decided to consolidate the physical security duties being covered by several vice presidents and offer Stanislaus the position of vice president of physical security. Today, he is responsible for the physical security of all facilities, assets and personnel worldwide, as well as background investigations for the company, its employees and non-employees.

Standardized Security Measures

First Data Corp.'s “one company” policy has aided Stanislaus in executing several major security initiatives. One project has been standardizing all company access control badges. First Data has nearly completed a badge conversion, going from several types and styles at each of the locations, to one, standard product, Stanislaus says. The one card policy means that the proximity cards by Irvine, Calif.-based HID Corp. allow employees access to more than 80 percent of the company's access-controlled locations. This measure alleviates the inconvenience and security risk of employees with multiple security clearances or roles in multiple divisions carrying several badges.

Between turnover, new hires and new business acquisitions, First Data issues 15,000 new cards per year. More than 19 C-Cure Security Management Systems by Lexington, Mass.-based Software House manage the access control systems globally.

First Data's CCTV system is migrating to an all-digital environment. Though some VCRs still record data, the replacement of failed equipment and new installations are fulfilled with standalone Intellex digital video recorders by American Dynamics, San Diego. Thousands of cameras guard all entrances, exits and data centers. Going digital was a simple and rewarding decision, Stanislaus says. “To be able to search and to pinpoint issues in 15 minutes rather than days, and digitally store the files is a huge tool.”

Software House's Netview also allows input from the DVRs to integrate with the C-CURE system. Security officers are able to access data from the DVRs through the C-CURE system in the event of an alarm or security breach. “I can access the system in Brussels from my desk,” Stanislaus says. “It allows me to really manage my facilities worldwide from a CCTV standpoint.”

Encircling Resources

Currently, the main entrances of most First Data buildings are manned by security officers who, according to company policy, must physically touch each badge with a pointer or finger as employees, non-employees and visitors enter. “This measure allows us to provide positive identification of the individuals entering our building,” Stanislaus says.

Contract security personnel has a price, however, and when First Data decided to centralize its guard contract for the entire company, Stanislaus was inspired to audition more innovative access control technologies. Specifically, he turned to revolving doors from Boon Edam, a Dutch manufacturer that has operated from its North American corporate headquarters in Salt Lake City for the last 15 years.

“We had tried security revolving doors in one or two facilities in the late 90s. They worked well, but had some problems, and over the course of time were not implemented much further,” Stanislaus says. “As we centralized the guard contract for the company, I established that the better approach would be to reduce the guard force where applicable by putting in these doors, and (we could) still have the security we need.”

High-security areas such as data centers are guarded by biometric readers from IR Recognition Systems, Campbell, Calif., and the Boon Edam Circlelock security portals. Boon Edam's Tourlock revolving doors are being introduced at exterior entrances. More than 20 of the Circlelock portals and Tourlock doors are currently in use, and all new facilities will be equipped with the high-tech entryways. First Data also has 20 security doors from assorted manufacturers in use.

The CircleLock consists of a pair of curved sliding doors within a solid or glass drum. Both doors are closed and locked until cued by First Data's access control system. When entry is authorized, the first door slides open to allow the entrant into the Circlelock and then slides closed and locks again. Sensors determine whether only the authorized user is inside, and then the second door opens.

The Tourlock resembles the more traditional revolving door, but only rotates when cued by the access control system. The automatic door allows for simultaneous traffic from two directions; 18-20 people can pass through in either direction in a minute.

To prevent piggybacking or tailgating, the doors and portals can be equipped with specialized sensors including weight and infrared sensors, and in some cases, digital cameras.

Because fewer people enter the data centers daily, the Circlelock's lesser throughput of 5-6 people per minute is sufficient, Stanislaus says. Overall response from employees has been positive, he adds. “The population at first had some resistance to it; but once they learned how to use it, they loved it.”

Employees may like the convenience of the security doors, but the cost savings are attractive to management, Stanislaus says. “It allows us to possibly eliminate contract security personnel, and under that scenario, the electronic doors can pay for themselves in 10 to 18 months,” he explains.

Communication on All Fronts

Keeping a company secure requires constant maintenance, and Stanislaus has devised several ways to keep the topic of security fresh in the minds of employees. Posters are being implemented that will change quarterly and explain security awareness topics throughout First Data facilities. The security department also communicates with employees through voice mail and e-mail. Though some divisions currently offer annual security awareness seminars, Stanislaus hopes this is another policy he will be able to extend throughout the company with some cyber help.

“Part of our global plan for the next few years is to require all employees to sign on and go through the security awareness program online,” Stanislaus says. “It would be a requirement as an employee of First Data to review this on an annual basis. We really want everyone to be a part of this program, and not just if you work in a major location. That's going to be a big cultural change for the company, but again, part of the ‘one company’ philosophy.”

In addition to the more traditional security operations ongoing at First Data, Stanislaus is involved in some unique partnerships. For one, he is chairman of the Tyco Safety Products EndUser Advisory Council. The council holds quarterly telephone conferences and semi-annual face-to-face meetings to help guide Tyco's efforts to meet the needs of its clients.

First Data is also becoming involved in the Open Security Exchange, a collaborative group working to define best practices and promote more effective exchange of enterprise-wide security data.

First Data's physical security and IT security departments “virtually work hand-in-hand,” Stanislaus says, but the joining of informational resources and authentication credentials would be an asset, Stanislaus says. “I've been involved in the beginning of this process, because I think it's so important.”

---

For the Record

ABOUT THE COMPANIES

For information, circle the Reader Service number (listed below) or visit securitysolutions.com

American Dynamics	25
Boon Edam	26
HID Corp.	27
IR Recognition Systems	28
Software House	29

Want to use this article? Click here for options!
© 2008 Penton Media Inc.

This month in Access Control

• Targeting The Customer
• Electronic Pedigrees
• One Hero Among Many
• Who? What? When? Where? Why?
• More from September's issue