Healthcare Security Risk Assessment Report

HEALTH CARE SECURITY ASSESSMENT REPORT The purpose of the assessment is to discover and identify security-related issues that provide opportunities for performance improvement, to help ensure a safe and secure environment for patients, visitors, staff, medical staff and others conducting business on Providence Health System campus. SHIFT SUPERVISOR LEADERSHIP OBSERVATION: Security Shift Supervisors are not overseeing their assigned shifts. Officers have no communication with the shift supervisors. Officers are stating the shift supervisors are spending a of time in the office with the television, or radio playing. Supervisors stated they have a position unit 4 that was created, and the unit 4 position performs the same supervisor duties and responsibilities. The Unit-4 has caused a lot of overtime, because the shift supervisors are requesting this created Unit-4 officer to stay over to oversee the shift and be the supervisor of the officers. RECOMMENDATIONS: The Security Shift Supervisor is responsible for providing daily supervision and mentoring to all assigned security officers. The Shift Supervisor will perform daily shift briefings and ensure that all members of the security team are providing excellent service. The Shift Supervisor will respond to all safety, security and medical calls for service on the Providence Healthcare campus. The Shift Supervisor will be responsible for handling all calls for service in a professional manner and documenting all incidents. The Shift Supervisor is responsible for handling assigned tasks from the Director of Security. The Shift Supervisor is responsible for attending meetings assigned by the Director of Security. SHIFT CHANGE & ATTENDENCE OBSERVATION: Officers shows up late to shift with no notice and does not call in to supervisor prior to start of shift. There is no pass down communication between the officer and the shift supervisor. Officers report to work every day and report to assigned security post without proper shift change, and directions instructions from Shift Supervisor. Officers reports to work without proper uniform RECOMMENDATIONS: All shifts are covered according to shift schedules. Officer should be on time and ready to work at the start of their assigned shift. This means that Security Officers should be in full uniform and mentally prepared to work at the start of their shift. Supervisors should be prepared to spend the first 15minutes sharing any security updates and important information. Officer should call supervisor 4 hours prior to shift if not able to make it to work. The shift change should always be monitored by the security supervisors to ensure that there is no time that the Providence facility is operating without a security officer, and all post are covered. Officers should report to shift change in proper uniform SECURITY OFFICER ACCOUNTIBILITY OBSERVATION: Security officers are not being supervised on their assigned shifts. During my late-night tours, officers are not on their security post, and are in places that they should not be. Shift Supervisor are sometimes not in place to be found. On 9/05/2019 at approximately 4:30pm. I walked into the security office where I heard noise as if someone was laughing and talking. I knocked on the door observing the shift supervisor on the phone while watching the baseball game on his office computer. Officers are complaining that the shift supervisor is leaving the property driving for uber. I have received serval emails from officers in regards to this matter. RECOMMENDATIONS: A reset for the current shift supervisors are needed to move forward to regain the trust of the providence staff. A great security team starts with leadership. POST ORDERS OBSERVATION: Security Director requested to see and review the Post orders.

The post orders were out of date and have not been updated in years. The Post Orders are written documents that clearly outline duties, responsibilities, and expectations of security guards. Without post orders, there is limited accountability, and so it’s important for the following to be in place. ▪ ▪ ▪ ▪ ▪ post orders exist and are up to date. post orders must be read, understood, and signed by every security guard working at any given security post. post orders must be tailor-made, specific to each security post. Post orders must contain emergency contact information and, all important security-related policies and procedures relating to the hospital. Post orders must be in a safe place out of the public’s eye; they must be regularly checked for accuracy and that they are, in fact, present RECOMMENDATIONS: Requested to see and review all post orders. The post orders were out of date and have not been updated in years. Officers are working with no post orders present or shift supervisor guidance or directions.

The post orders that are out of date and missing emergency contact information and, all important security-related policies and procedures relating to the officers. • SECURITY OFFICER TRAINNG OBSERVATION: Training records on officers were requested but could not be produced. There is no officer training. Officers are having a hard time with understanding some of their responsibilities as a security officer, due to not having the proper training. Officers CPR/ AED training has expired. New hire officer training doesn’t exist. Supervisors are creating positions that do not exist in the security department which is causing overtime. RECOMMENDATIONS: Training Officer should schedule and develop to assist the training in the security department. The officers should receive ongoing competency-based training that focuses on the specifics of their job and is designed to improve their ability to perform their duties as a security officer KEYS-BAGDE ACCESS CONTROL OBSERVATION: During my security one on ones and my assessment, it was learned that seldom are keys, or activated badges recovered from employees who are resigning or were being terminated. As a result, there are an unknown number of keys to the hospital in circulation outside of the hospital. This includes master keys and activated badges.

. During building tour patrols, officers are not checking the hardware components of badge readers within their assigned buildings to ensure functional integrity and to report deficiencies accordingly to their shift supervisor. There are doors with badge readers that are not working, and other doors found open in highly secured areas. Officers are not conducting full patrols. RECOMMENDATIONS: During building tour patrols, officers will review hardware components of badge readers within their assigned buildings to ensure functional integrity and report deficiencies accordingly. Officer’s will also check to ensure doors (interior and exterior) hardware is operational. Officers will report any deficiencies found during their shift to their shift supervisor. Employees badges should be deactivated at the time of termination Contract Security OBSERVATION: A new contract security company is needed, this will allow Providence in-house security to focus and Improve the urgent safety needs of the patients, visitors, staff, and doctors, to outsource some of the security functions with contract security will help security of providence concentrate our limited resources on the core function of the health care system. The current contract security is not working out due to the following: • • • • Incorrect invoices Officers leaving security Post The security contract bill rate is extremely high Contract bill rate should not be more $20.00-21.00 per hour

RECOMMENDATIONS: Contract Security Officers Allow Companies To Reduce or Control Operating Costs – Because a security contractor focuses on providing security guard service, they typically have a lower cost structure due to economies of scale. Those reduced costs allow your clients to focus on activities that increase their competitive advantage. Security Officer Patrol Accountability OBSERVATION: Officers are not patrolling the key target areas of the Providence campus, because there are no patrols in areas that are highly secured, and officers are not being held countable and given the proper guidance and supervision by the shift supervisor, no security presents leaves Providence at risk for security breach and other serious issues. RECOMMENDATIONS: THE PIPE- can manage checkpoints, define routes for your patrols, and create tour reports showing where officers have been. • Checkpoints are the touch memory buttons read by THE PIPE. Checkpoints can represent officers, locations, or observations, or checkpoints can be unde • Officers use The PIPE to read checkpoints and perform tours. • Locations are places where checkpoints have been installed. • Observations are additional information that can be recorded and associated with locations. • A route is a collection of locations to be visited.

• A tour represents a visit to the locations in a route and reading the related location checkpoints. • Missed locations are locations included in a route that were not visited during a tour Crime Data Data Disclaimer: All statistics presented here are based on preliminary DC Index crime data reported the prior business day to today’s date. The statistics presented here are compiled based on the date the offense was reported (“report date”) to the police department. The data do not represent official statistics submitted to the FBI under the Uniform Crime Reporting (UCR) program. All preliminary offenses are classified based on DC criminal code and not the FBI offense classifications. Because the data is preliminary, all statistics are subject to change.