High Rise Corporate Building

Aanko was selected to perform an extensive physical and cyber security survey of a large high rise facility to collect threat data on each floor pertaining to the WiFi environment. The collected data was then mapped out, normalized, and analyzed, The scope of work included passive and active attempts to penetrate, exploit, or compromise hosts, servers, clients, and infrastructure. As a network reconnaissance, the Aanko team gathered hundreds of pages of data from the WiFi environment and analyzed data to determine vulnerabilities and potential risks to facility tenants. Maps were used to survey the WiFi environment to generate heat maps on WiFi availability and signal quality. The heatmaps were taken in a survey that followed the architectural floor layout and recorded dynamically signal strength for utilization in capacity planning. Detailed WiFi infrastructure implementation and physical environment recommendations for areas of concern were provided to property management and facility ownership for remediation.

Based on those vulnerabilities, a detailed inventory, mitigation steps, risk tolerance, and valuation was identified. Recommendations were provided based on industry best practices, mitigation of liability, risk tolerance, and priority determination.

Central California County

Aanko conducted a County-wide Threat Hazard Identification and Risk Assessment, Stakeholder Preparedness Review (THIRA/SPR), create new Department Continuity of Operations Plans (COOP)Countywide (15) and update Emergency Operations Plans (EOP) for each respective City (6) and the County as a whole.

The project also includes the development of 12 Annexes to the County EOP and 18 Emergency Support Functions (ESFs), to align the County EOP with the California State Emergency Plan. This Project is ongoing.

The project engaged public and private sector stakeholders in evaluating threat and hazard impacts to the built, social, and natural environment; public health; and the regional economy. The THIRA/SPR is generating capability gaps with quantitative-based information as well as information about what/where/who is of greatest concern to the community and the county’s hazard exposure. Information about adaptive capacity and sensitivity based on POETE (Planning, Organizing, Equipping, Training and Exercise) is being used to develop the County’s and respective County Cities’ Emergency Operations Plan(s). Based on a combination of experience, forecasting, subject matter expertise, and other available resources, Aanko developed a list of threats and hazards that could affect the County. Aanko is assisting the County in establishing capability targets to determine the level of capability that the community plans to achieve over time in order to manage the threats and hazards it faces by identifying impacts, objectives, and timeframe metrics, along with areas of funding sources to close capability gaps.

Southern California Water Department

Aanko was the technical lead for the security assessment and engineering support for a City’s Water Department to provide security consulting, security design engineering, and perimeter security enhancement services for the City’s water and wastewater systems in development of a Security Master Plan.

The security assessment and security design services include access control, video surveillance, intrusion detection, security communications, and a security office feasibility study to support the security program.

The assessment provided a review of the existing perimeter protection measures. Identifying weakness and vulnerabilities to be factored into the new security technology systems to support strengthening the perimeter protection and enhance the Department’s security posture.

Global Critical Chemical Manufacturing Firm

Aanko was selected to assist a global chemical manufacturing firm to custom-design an Introductory Industrial Technology Self-Study Guide Training Module (8 Hour), an Intermediate (3-day) Industrial Technology Classroom Course, and an Advanced Industrial Technology classroom training sessions (5-day) to increase entry-level production teams in quickly advancing into integrated industrial teams. The courses included chemical safety standards, electrical standards, and high-functioning industrial systems processes.

Northern California Public Drinking Water Vulnerability Assessment

Aanko conducted vulnerability assessments of two city water systems under USEPA guidelines to comply with the federal Bioterrorism Act requirements and to work with the cities to develop emergency operations plans for the integrated water systems. Aanko’s solutions were to conduct vulnerability assessments of infrastructure including wells, distribution lines, reservoirs, pump stations and other facilities, and provide performance-based recommendations for security enhancement. Aanko developed the emergency response operations plans for the three integrated systems, and assisted the cities in merging the respective plans into the overarching city plans. Aanko also provided a water system security vulnerability training course for employees at the two cities, and consulted on water security design projects to protect domestic water sources.

The team evaluated the existing infrastructure, including wells, distribution lines, reservoirs, pump stations and other facilities, and provided performance-based recommendations for security enhancement, including all PSC and SCADA operations. Aanko also provided a water system security vulnerability training course for employees and consulted on water security design projects to protect water sources.

Part of the project included coordinated assessments with the US Bureau of Reclamation to integrate Dam and Powerplant vulnerabilities, including all PSC and SCADA operations.

Southern California City Civic Center

The Aanko Team provided a Comprehensive Threat and Vulnerability Assessment (TVA) following DHS/FEMA standards that enabled the City Civic Center the ability to understand both the design and operational criteria that would be used to deliver the appropriate levels of risk mitigation for their new multi-story, $300 million+ City administration building.

This critical TVA engagement involved all stakeholders in a discussion and decision process that impacted the building design, operations, and construction costs within a tightly constrained budget. The Aanko team addressed the architectural and engineering, electronic security technologies, and operational considerations through the TVA utilizing FEMA standards.

Aanko discussed all aspects of design with the Protective Design Engineer, Architect, end user, and City Police department on site Crime Prevention Through Environmental Design (CPTED) concepts, structural progressive collapse criteria, window glazing material design, operational security staffing levels, HVAC controls, lobby circulation design, parking controls and operations, child care security measures and more. This TVA process will become foundational to the City as the remaining buildings in the complex are added to the site over the forthcoming years.

Department of Defense

Aanko was selected to complete an assessment and create the South Korean Theater Emergency Plan for the Commander, Pacific Naval Forces Korea. The resulting information in this plan is restricted. Aanko was also selected by the US Air Force to assist in developing Biological Warfare response plans for statewide assets. The resulting information in these plans is also restricted.

East Coast State

Aanko worked with a New England State’s Homeland Security Department to provide Security Assessment and Emergency Response Planning and Exercises for all State buildings. This initiative aimed to strengthen the preparedness of state-owned facilities against active threat incidents by developing tailored Security Designs and Emergency Response Plans (ERPs) that reflect each facility’s unique risks and operational needs.

A comprehensive exercise cycle was implemented, which included workshops with facility leadership, tabletop exercises, and a Complex Coordinated Terrorist Attack (CCTA) Functional Exercise. These exercises facilitated hands-on training and allowed participants to practice incident response protocols in realistic scenarios.

Detailed After-Action Reviews (AARs) were conducted following each event, providing actionable insights for continuous improvement. The positive feedback received from participants demonstrates a heightened confidence and readiness to respond to potential threats, thereby enhancing safety across the state’s facilities.

Aanko’s collaborative approach ensured all stakeholders were engaged throughout the process, aligning the developed plans with the State’s commitment to security and public safety.

Energy Commission

Aanko was selected to create the Energy Assurance Plan and Energy Emergency Response Plan for a Western State Energy Commission. Aanko's solutions were to:

Southern California City

The Aanko team was selected by the City and Utility for an emergency management project to develop 32 emergency plans and Annexes, to protect its residents, including a Continuity Plan and Emergency Plan. The Aanko team ensured a structured review of the draft emergency planning documents by City and Utility stakeholders.

The final planning documents included a City-Wide Emergency Operations Plan, support annexes for Public Works & Engineering, Energy & Utilities and Cross Sector Business & Critical Infrastructure, as well as a Continuity of Operations Plan, a Pandemic Plan, and Community Lifelines.

Community Bank

Aanko completed a Safety & Security Risk Assessment for a multi-state midwestern financial client that included three banks. Aanko reviewed all employee security awareness procedures, security force standard operating procedures, workplace violence prevention strategies, and corporate Emergency Management Plans. Aanko developed an Integrated Process Team with senior management, including the Risk Manager and Director of Corporate Safety & Security as part of their assessment validation process. Aanko led the identification of threats, vulnerabilities and risks to all corporate operations in two states including business continuity and disaster recovery, and information security/business intelligence reviews. Aanko also designed, developed and evaluated a series of safety and security exercises to determine contract security effectiveness, and provided training protocols for contract security to effectively provide for public safety. Aanko developed a strategic executive summary report, an executive summary presentation and a comprehensive technical recommendations report on facility vulnerabilities to criminal and terrorist threat. Finally, Aanko developed a security scorecard to enable the client to track its security program in the future.

California Municipal Utility

Aanko provided a cybersecurity assessment of all the Utilities’ business and financial systems, including Supervisory Control and Data Acquisition systems overseeing their public drinking water and wastewater infrastructure to comply with US EPA guidelines.

The Utility serves over one million people. The project included audit, characterization and inventory of cyber assets, verification of physical infrastructure currently protecting those assets; creation of a prioritized asset inventory; penetration testing of systems; review of security policies and procedures; identification and prioritization recommended risk mitigation options; cost/benefit analysis of recommended risk mitigation options, coordinated development of technical and managerial reports on cyber security status, and training of staff on operational security processes.

Food Regulator

Aanko was selected to develop written materials to help ensure an efficient, effective and integrated inspection system and a coordinated response to dairy foods emergencies for quick and easy use by Food Regulators and Public Health personnel. The project objectives also included training of farm and ranch personnel on high impact high morbidity threats that impact dairy and beef production. The project required assessments and recommendations for sanitary procedures and cleanliness, employee hygiene, water system inspection and protection, antibiotic storage, handling and records, herd health, approved chemicals, their usage and limits, foreign material hazards and safety precautions, chemical hazards, and new construction, maintenance and repair review and approval.

City Department of Utilities

Aanko provided a security assessment and security network specification development for the water system. The assessment laid the foundation for development of the Department’s Security Standards that addressed access control, illumination, intrusion detection, and video surveillance, including cybersecurity requirements, to improve employee safety while discouraging vandalism and theft at facilities.

Additional tasks included review of existing security systems and master plan; and creating a condensed security master plan and conceptual design diagrams.

Northern California County

Working in a Private-Public Partnership with the County Homeland Security Unit under the Sheriff’s Department, Aanko was the technical lead conducting threat assessments for over 50 critical infrastructure sites within the county. Qualitative data was gathered on asset significance, feasibility, threats, countermeasures and vulnerability. The data was then analyzed using quantitative and statistical analysis.

This resulted in quantifying assets with existing threats and countermeasures that yielded a probability of asset selection and successful attack by a terrorist organization. The team also quantified triage of all critical assets and provided a quantifiable value of recommended countermeasures. The process enabled the County Board of Supervisors to validate a risk rank listing of critical infrastructure to prioritize the initiation of security vulnerability assessments countywide by Aanko, in partnership with the county Homeland Security Unit.

Central California County

Aanko conducted a County-wide Threat Hazard Identification and Risk Assessment, Stakeholder Preparedness Review (THIRA/SPR), create new Department Continuity of Operations Plans (COOP)Countywide (15) and update Emergency Operations Plans (EOP) for each respective City (6) and the County as a whole.

The project also includes the development of 12 Annexes to the County EOP and 18 Emergency Support Functions (ESFs), to align the County EOP with the California State Emergency Plan. This Project is ongoing.

The project engaged public and private sector stakeholders in evaluating threat and hazard impacts to the built, social, and natural environment; public health; and the regional economy. The THIRA/SPR is generating capability gaps with quantitative-based information as well as information about what/where/who is of greatest concern to the community and the county’s hazard exposure. Information about adaptive capacity and sensitivity based on POETE (Planning, Organizing, Equipping, Training and Exercise) is being used to develop the County’s and respective County Cities’ Emergency Operations Plan(s). Based on a combination of experience, forecasting, subject matter expertise, and other available resources, Aanko developed a list of threats and hazards that could affect the County. Aanko is assisting the County in establishing capability targets to determine the level of capability that the community plans to achieve over time in order to manage the threats and hazards it faces by identifying impacts, objectives, and timeframe metrics, along with areas of funding sources to close capability gaps.

Food Regulator

Aanko was selected to develop written materials to help ensure an efficient, effective and integrated inspection system and a coordinated response to dairy foods emergencies for quick and easy use by Food Regulators and Public Health personnel. The project objectives also included training of farm and ranch personnel on high impact high morbidity threats that impact dairy and beef production. The project required assessments and recommendations for sanitary procedures and cleanliness, employee hygiene, water system inspection and protection, antibiotic storage, handling and records, herd health, approved chemicals, their usage and limits, foreign material hazards and safety precautions, chemical hazards, and new construction, maintenance and repair review and approval.

Bay Area Water District

Aanko provided Security Engineering services to develop and implement a comprehensive Security Master Plan and Implementation Plan for a California Bay Area Water District (BAWD). The project is being executed in four phases:

The primary goal is to safeguard the BAWD’s potable water system by enhancing physical barriers, access controls, and surveillance systems across BAWD sites.

Midwest Convention and Visitor Bureau

Aanko was the Technical Lead on a recently completed five-year project to provide IT Network and Security Consulting Services for a Midwest Convention and Visitors Bureau (CVB). The CVB operates a Convention Center, Theater, Hall, Amphitheater, Pavilions and multiple parking facilities.

Our Aanko team provided a thorough assessment along with two reports that detailed the current vulnerabilities, network components, and best practices and recommendations for immediate and long-term remediation. Upon assessment completion, Aanko provided a roadmap of recommendations, action items, and delivered IT & cybersecurity policies, inclusive of physical security systems (Video Surveillance Systems (VSS) & Physical Access Control Systems (PACS)). The project was inclusive of assisting the CVB in policy implementation throughout different project phases.

State of California

Aanko was selected to conduct an Enterprise-wide Business Continuity Risk and Vulnerability Assessment of a State Agency’s Cyber and Physical Interface since 2016 and contracted through 2027. Aanko is assessing all physical infrastructure systems within the Enterprise Architecture and data center, including information, information systems, human capital, financial, enterprise-wide infrastructure, 3rd party vendor access and service and system contracting and acquisition processes. Aanko is validating existing security controls at the governance (Tier 1), Systems (Tier 2) and Environment of Operations (Tier 3) Levels for the Technology Recovery Plan and Continuity Plan. The results enable the agency to, determine security control validity against IT and cyber policies, and update those security controls accordingly.

Municipal Utilities District

The Aanko team was selected to provide emergency management, security and threat assessment services for a national utility. Aanko designed the perimeter security for the renovation of the headquarters. The security systems designed included access control for vehicle and pedestrian gates, perimeter intrusion detection, and a campus wide IP video surveillance system. Project entailed the replacement of existing open space parking and additional site access to meet current life safety and ADA codes; the re-design of existing landscaping; increased visibility of the headquarters building; sustainable design elements; and revised irrigation. for the Anko also creates an enterprise Security Master Plan, and provided security recommendations for a nuclear power plant facility.

Large-Scale Transit System

Aanko was selected to provide a large-scale, system-wide, comprehensive threat and vulnerability assessment for a large transit system in the U.S. Our team of assessment experts were deployed to each transit site to walk railway tracks, bus lines, interview key stakeholders, and partner with transit leadership in order to assess system vulnerabilities. Our team gathered our findings and recommendations, which were used to develop a comprehensive report that included a physical security gap analysis, a safety and security climate and culture assessment, and a physical, electronic, and procedural security master plan. The master plan identified threats, risks, and security deficiencies, recommended mitigation strategies, reviewed policies and procedures, and provided enhancements, established implementation priorities and phasing, and provided detailed construction cost estimates for each facility to enable grant funding and transit budget development.

Southern California Water Department

Aanko was the technical lead for the security assessment and engineering support for a City’s Water Department to provide security consulting, security design engineering, and perimeter security enhancement services for the City’s water and wastewater systems in development of a Security Master Plan.

The security assessment and security design services include access control, video surveillance, intrusion detection, security communications, and a security office feasibility study to support the security program.

The assessment provided a review of the existing perimeter protection measures. Identifying weakness and vulnerabilities to be factored into the new security technology systems to support strengthening the perimeter protection and enhance the Department’s security posture.

Northern California Public Drinking Water Vulnerability Assessment

Aanko conducted vulnerability assessments of two city water systems under USEPA guidelines to comply with the federal Bioterrorism Act requirements and to work with the cities to develop emergency operations plans for the integrated water systems. Aanko’s solutions were to conduct vulnerability assessments of infrastructure including wells, distribution lines, reservoirs, pump stations and other facilities, and provide performance-based recommendations for security enhancement. Aanko developed the emergency response operations plans for the three integrated systems, and assisted the cities in merging the respective plans into the overarching city plans. Aanko also provided a water system security vulnerability training course for employees at the two cities, and consulted on water security design projects to protect domestic water sources.

The team evaluated the existing infrastructure, including wells, distribution lines, reservoirs, pump stations and other facilities, and provided performance-based recommendations for security enhancement, including all PSC and SCADA operations. Aanko also provided a water system security vulnerability training course for employees and consulted on water security design projects to protect water sources.

Part of the project included coordinated assessments with the US Bureau of Reclamation to integrate Dam and Powerplant vulnerabilities, including all PSC and SCADA operations.