SSAIB News

We are pleased to announce that due to the pragmatic and positive approach to the pandemic adopted by the NPCC, BAFE, SIA and UKAS, as they apply to our certification schemes we are able to continue offering certification services to most new clients and maintain the certification of our existing clients.

Due to the restrictions imposed by government relating to travel and social distancing audits for certification, surveillance and re-certification will need to be conducted remotely. We have amended our ICT infrastructure as required to support our remote operations.

SSAIB want to make all of our registered firms aware of a COVID-19 scam email that has been reported to us, to ensure the online safety and security of all SSAIB-registered firms is not compromised at this time.

Within the email – entitled Coronavirus Financial Support for Members - firms are encouraged to view information/documents PDFs that have supposedly been sent via a Dropbox folder. However, this email has not been sent by ourselves – the email address is listed as [email protected] - so we want to make it clear that firms should report this email as a scam and, under no circumstances, should it be opened or have any links clicked on within it.

Scammers are using the coronavirus pandemic as a way to prey on people’s worries and insecurities during these uncertain times, so SSAIB implore you all to be vigilant online and report any suspect emails as spam to your email provider. Should any more emails claiming to be from SSAIB end up in your inbox and you’re unsure as to whether it is genuine or not, please contact us at 0191 296 3242 to check its authenticity.

SSAIB has been asked to forward this correspondence onto our registered firms by the City of London Police, regarding the COVID-19 strand of the Coronavirus.

Beware scams relating to Covid-19 pandemic

Criminals will use any opportunity they can to take money from innocent people. This includes exploiting tragedies and global emergencies, such as the COVID-19 pandemic, to scam people in a variety of ways. The number of these scams are only likely to increase and we need individuals and businesses to be fully aware and prepared.

As more people stay indoors and work from computers and laptops at home, there is more opportunity for criminals to try and trick people into parting with their money at a time when they are anxious and uncertain about the future.

We have already received nearly 400 reports of fraud related to COVID-19, the majority of which are online shopping scams where people have ordered protective face masks, hand sanitiser, and other products, which have never arrived. We have also seen a large amount of phishing emails and texts circulating, that use COVID-19 as a hook, and try to get recipients to click on links or attachments which harvest information and lead to the individual revealing personal or financial details.

Is fraud rising?

While the number of reports of fraud in general is not increasing, we are warning people that the current social situation we find ourselves in could lead to any number of fraud types increasing as this immediate public health crisis unfolds. We are advising people to be particularly vigilant around:

• Computer Software Service Fraud – as more people work from home, fraudsters may capitalise on slow networks and IT problems, to commit computer software service fraud. Be wary of cold calls or unsolicited emails offering you help with your device or to fix a problem. Attached is a helpful graphic with protection advice.

• Mandate Fraud – with more people working at home, it may be easier for fraudsters to impersonate senior decision makers, with seemingly valid reasons why they cannot be contacted, and request a change in a direct debit, standing order or bank transfer mandate, by purporting to be an organisation you make regular payments to. The change they ask you to make will divert funds to their own bank account. Attached is a helpful graphic with protection advice.

Advice for businesses in regards to people working from home

Many organisations are either moving to working remotely for the first time or significantly increasing it, and this presents a number of cyber security challenges. Advice on how to respond to those challenges is set out in the NCSC’s working from home guidance.

There are a number of practical steps organisations can take to reduce the risk including:

• Supporting people to use stronger passwords and setting up two factor authentication.

• Ensuring staff know how to report problems, especially those related to security.

• Creating ‘How do I’ guides for new software and tools staff may be using.

• Using VPNs to allow users to securely access the organisation’s IT services.

• Ensuring devices encrypt data whilst at rest.

Some organisations may be allowing staff to use their own devices to work remotely. In this case, please refer to the NCSC's Bring Your Own Device (BYOD) guidance.

In addition to following the guidance set out above, it is worth being aware of phishing emails which trick users into clicking on a bad link. Once clicked, the user is sent to a website which could download malware onto your computer, or steal passwords. We know that cyber criminals are opportunistic and will look to take advantage of people’s fears, and there is evidence that the coronavirus outbreak is being exploited in this way.

Those who do fall victim shouldn’t feel bad – these scams can be extremely convincing – but what they should do as quickly as possible is report it to their IT department when the incident is work-related or Action Fraud when it is personal. They can also open their antivirus (AV) software if installed, and run a full scan, following any instructions given. If they’ve been tricked into providing password, they should change their passwords on all their other accounts. The NCSC’s guidance on suspicious emails provides more tips on this.

Our Cyber Griffin team have also created a series of short video guides on how to keep you and your family safe while online at home which contain practical hints and tips and cover a range of topics, including passwords, phishing, vishing and multi-factor authentication.

To report a fraud, please follow this link: https://www.actionfraud.police.uk/

Phishing emails can be forwarded to [email protected] or via https://www.actionfraud.police.uk/report-phishing.

SSAIB were overcome with pride upon discovering that registered firm PLP Fire Protection have been providing invaluable assistance in the building of the Government’s first emergency field hospital at the ExCel in London.

The temporary NHS Nightingale hospital has been set up to treat up to 4,000 coronavirus patients, with Dartford-based PLP Fire Protection helping to transform the ExCel exhibition space – which was due to host IFSEC International and FIREX International next month, before the COVID-19 pandemic forced a reschedule – into a hospital in just nine days.

The inspirational PLP Fire Protection, who have been registered with SSAIB for BAFE SP203-1 since May 2019, have worked with 160+ other contractors – as well as 200 army engineers – to complete the transformation and company director Rob Beeching revealed just how hard the work was for him and his team, who he had nothing but praise for in what has been a tough week for them all.

Replying to an email from FIA (Fire Industry Association) CEO Ian Moore, Rob stated: “This week, quite honestly has been hell. We were literally brought back to site on Monday morning and had the most unrealistic time to get the initial 500 beds section installed and signed off.

“The effort from my guys and the subbys [sub-contractors] I have got in has been incredible. I am so proud of them all.

“We have even had tears from some of our guys, but proud tears. Working conditions have been very tough both physically and mentally.

“I have been getting home at midnight most days this week, I get home and just feel like breaking down. It's been an emotional rollercoaster for sure.”

With the initial 500 beds in place, the hospital will care for patients with the virus in intensive care who have been transferred from other London hospitals. The building work continues in order to get the space sorted for the other 3,500 beds planned, but Rob insisted that he would not force his heroic team to continue to work if they were worried about being in close proximity to the virus.

Rob continued: “We were told - by a representative from the WHO – that once patients start arriving, although they will be sectioned off by a wall, we would still be working in adjacent halls. They said we would be completely safe.

“I was no way going to force any of my guys if they didn't feel comfortable but, when I asked for a show of hands who wanted to continue, 80% raised their hands. They are all in this until the end and feel they can’t just leave site until its completed.

“Even our suppliers have been personally delivering our equipment etc that we need to site. We are so grateful. The help being offered from so many people has been breath-taking.”

SSAIB chief executive Alex Carmichael added: “It’s great to see SSAIB-registered firm PLP Fire Protection assisting with the construction of the NHS Nightingale field hospital and I have to commend them for their dedicated effort during this time.

“On behalf of everyone at SSAIB, I want to thank Rob and the rest of his team for their heroic commitment to helping the NHS in this way, as they continue to help with the creation of more beds at the facility. I also hope they all stay safe while completing this vital work needed to help with the treatment of the many patients currently being admitted with coronavirus.”

We are pleased to announce that, due to the pragmatic and positive approach to the pandemic adopted by the NPCC, BAFE and the SIA - as they apply to our certification schemes - we are able to continue offering certification services to most new clients and maintain the certification of our existing clients.

Due to the restrictions imposed by Government - relating to travel and social distancing - audits for certification, surveillance and re-certification will need to be conducted remotely. Therefore, we have amended our ICT infrastructure as required to support our remote operations.

Certification auditing arrangements for each scheme differ and details of these arrangements will be provided to applicants as part of the application process.

Arrangements for surveillance and re-certification audits also differ for each scheme and registered organisations will be made aware of these in advance of surveillance or re-certification audits becoming due.

The SSAIB’s head office functions - including phone lines - remain operational but we have taken measures, such as home working, to safeguard the health of our staff.

By continuing our operations, we are primarily seeking to support our existing clients while - at the same time - providing an opportunity to gain certification, for organisations seeking certification for the first time.

These arrangements will remain in place for as long as financial constraints allow.  It may be necessary to amend our services, particularly if the lockdown remains in place for a long time.

In the event of it becoming necessary to reduce the services we can offer, we will do so in a phased and managed manner to minimise the impact on the services we provide.

However, should circumstances change, we will inform our registered firms of any new developments.

Alex Carmichael
SSAIB
Chief Executive