I527-290 ESRIF Final Report (WEB).indd - European Commission

New capability driven, standardisation concepts must be developed, focusing on the performance of security-related solutions
rather than on the level of technical equipment specifi cations. This security-by-design approach will enrich the market and
allow a broad range of industries to come up with compatible, interoperable and fl exible solutions to meet customer needs.
Incorporating security in new systems, together with safety and environmental integrity, at the earliest stages of the design
process has an ongoing and positive impact. Critical infrastructures and services will need innovative technical solutions and
capabilities, and intense preparation of the operators to minimise the impact of incidents and ensure fast recovery. At nuclear
and airport facilities, for example, high standards of security require that design takes full account of security requirements for
both operational and crisis scenarios right from the start. Security-by-design aff ects other life-cyle aspects too. Legacy systems
may need updating to new security levels. Maintenance and repairs must guarantee safe and secure systems for the public.
Periodic testing is imperative, as is the continuous training of operators.
The security-by-design also directly concerns quality of emergency management, where personnel at all levels must be able
to communicate effi ciently with fi rst responders and society at large. Raising public awareness about security and the nature
of threats, and how to interact with emergency forces during crises are important goals.
The fi rst analytical phase of a security lifecycle is greatly enhanced if detailed standards and guidelines regarding the product’s
applications are immediately available. It is common practice today to conclude the realisation phase (covering detailed design
to manufacture) via verifi cation of performance and design, so that a product can be certifi ed early on. In this regard, some
type of European security label could be a useful instrument for promoting a common “seal of quality” for security equipment,
capabilities and solutions.
2.9 Awareness raising through education
and training
Education and scenario-based training contribute signifi cantly to the overall acknowledgement and recognition that
security is a common responsibility of all stakeholders, especially, policymakers, regulators and citizens.
Education and training in the security sector is a common responsibility of all stakeholders: security offi cers, policy makers, law
enforcement agencies, civic society, industry, research organisations, academia and the media.
To achieve resilience, specifi c programmes are needed to reach out to the wider public to raise awareness of threats, risks
and vulnerabilities and to improve its understanding of policies and the technological solutions required for security. Priority
should go to initiatives involving the media and the special role they play in communicating about security crises.
Security training across Europe is diversifi ed and often under the direct control of local authorities or a specifi c public service.
For eff ective interoperability, transnational initiatives in training and education for security functions and tasks should greatly
increase experience and the exchange of best practices. Tying these initiatives to existing networks for professional training
such as CEPOL – the European Police Academy – would ensure rapid progress in this important fi eld.
The use of virtual reality, “gaming” and other simulation environments off ers considerable training opportunities in the security
fi eld. Their use would increase informal learning, foster communities of practice and facilitate the translation of operational
lessons learnt into learning environments (and vice versa). Similarly, scenarios would provide realistic contexts and environments
for complex crisis management operations and off er an important means for delivering training solutions in the future.
17