Are there holes in your security program? Quite likely. In this episode of SM Highlights, host Brendan Howard speaks with red team expert Gary DeMercurio about how to develop a testing program and scope that deliver actionable results and value. Also, Marc Weber Tobias outlines the concept of insecurity engineering in locks and the basic awareness security practitioners should leverage. Then, Mark Johnson explains how data-driven video surveillance systems are being used to improve operations and safety for medevac helicopters.

Additional Resources
Interested in penetration testing? Watch a selection of key takeaways from GSX 2024 speakers here: https://www.youtube.com/watch?v=cHXSh77ONPw

Read more about pen testing and red teaming in Security Management’s coverage publishing later in December.

Read more from WIRED about Marc Weber Tobias’s work on Medeco locks here: https://www.wired.com/2008/08/medeco-locks-cr/

For more on medevac helicopter security, read Mark Johnson’s article here: https://www.asisonline.org/security-management-magazine/monthly-issues/security-technology/archive/2024/december/Data-Driven-Video-Technology-Enhances-Medevac-Helicopters-Safety/

Learn more about flying debris affecting helipad safety in this National Transportation Safety Board safety alert: https://www.ntsb.gov/Advocacy/safety-alerts/Documents/SA-057.pdf

Dive deeper into transportation security in the December 2024 issue of Security Technology here: https://www.asisonline.org/security-management-magazine/monthly-issues/security-technology/archive/2024/december/