No alarms and no surprises

24 September 2013



Modern technology plays a pivotal role in keeping hotels secure and safe. Arup’s Gregoir Chikaher and the Information Systems Security Association’s Kevin Richards speak to Hotel Management International about how the latest developments provide protection and why operators must be suitably proactive without seeming alarmist.


Ensuring a safe and secure environment for staff and guests is a priority for any hotel, and one in which modern technology plays an increasingly crucial part. The latest systems can be used to help protect against physical threats, while the growing frequency of data breaches makes new technology an essential tool in tackling cybercrime.

Security measures need to be discreet, however, and it is essential to strike the right balance between safety and intrusiveness. For Gregoir Chikaher, global and European hotel business leader at engineering firm Arup, recent advances have allowed hotels to improve their systems without alarming the paying customer.

"Security methods have become more technically advanced and, because of this, harder to breach," he explains. "Most properties now allow the guest to book online with a credit card, and, in doing so, enable the hotel to collect information that it can use to verify the person as they check in. This system can also be used to run credit checks. If the guest has an unpaid bill at another branch, for example, this can help safeguard the hotel against incurring further financial loss."

CCTV, long-established as a basic safety measure, is also becoming more sophisticated.

"CCTV systems have become much more proactive," says Chikaher. "Not only do cameras provide a level of general surveillance, they can now detect items such as bags abandoned in public areas, provide automatic number plate recognition for pre-registered guests and employee vehicles, and detect when a person is in a sensitive area."

Collectively referred to as video content analysis, CCTV cameras now require less manned monitoring and only need responding to on an exceptional basis. Likewise, other security measures, such as key card systems, have also reduced staffing requirements.

Hacked off

Data security is an increasingly important issue for hotels, with major brands such as Radisson and Wyndham Hotels and Resorts just two of the growing number of businesses that have fallen victim to hackers. In fact, Wyndham fell prey to hackers on such a repeated basis, losing guest credit card and personal information in the process, that the US Government filed a suit against the company in June of last year.

"The hospitality industry has some unique security challenges surrounding data protection, data privacy and physical security," says Kevin Richards, president of the Information Systems Security Association. "In many ways technology has increased the speed and volume, and therefore the impact of attacks. Hotels manage a significant amount of personal data, including credit card numbers, addresses and affinity programme information."

Guest internet access can also be a weak point in a hotel's defences. "Attackers can monitor and track guest activities and look for credit card information, user credentials and other sensitive data," he adds. "Because this is not an attack on the hotel's systems, many of these activities could go undetected."

There are, however, ways in which the industry can protect itself, such as separating the guest and hotel networks.

"Information security can be a challenge for any industry that wants to provide convenience to its customers," continues Richards. "The reality is that travellers want to be able to do business while staying at a hotel. They want to check their personal email and social networking sites, and do everything they would in the office or at home."

"Hotels manage a significant amount of personal data, including credit card numbers, addresses and affinity programme information."

Technology brought into the property by guests can also cause problems. "The fact that hotels don't control endpoint devices is a particular challenge as computer malware can easily be introduced," he adds. "Furthermore, with data stores containing a potentially large repository of critical information, they are higher-profile targets for attackers to pursue."

The introduction of security technology can be something of a delicate balance for hotels, however. On the one hand, it is necessary to create a safe environment, while on the other, security measures need to be unobtrusive. "Many issues, such as the risk of theft, are understood by the operator and the guest, who will expect a level of security that is representative of the threat posed," says Chikaher. "Not all methods of surveillance are seen as intrusive. For example, the presence of CCTV in public areas such as lobbies or corridors can often make people feel more secure. However, visiting a hotel should be a leisurely experience, where guests can slow down and relax. They are not prisons, and therefore you can't restrain people too much."

Safety in numbers

Future security policies will continue to rely heavily on emerging technology. "We can expect to see new measures such as people-recognition technologies, which may use PIN codes, or fingerprint, voice and iris readers to make it harder for people with ulterior motives to enter," says Chikaher. "When used to register a guest, this biometric information may then be used to authenticate room access, purchase goods and services, and allow access to additional or privileged facilities such as gyms and spas."

But operators should not expect a day to come when technology will manage all of their security concerns; there are certain human skills and intuitions that machines will never be able to replicate. Furthermore, the very presence of staff on the front line goes a long way towards creating a warm, welcoming environment that puts guests at ease.

"You can have the most sophisticated systems in place, but if someone is determined and clever enough, these can be circumvented," Chikaher warns. "People have caused atrocities by taking on fraudulent identities to avoid detection, for example. You will always need people to be vigilant at reception and other access points, to watch for suspicious behaviour and guide people in the right direction to where they should and shouldn't be, especially in higher risk establishments.

"In developing the use of technology in hotel security, the balance between protection and providing the right hospitality experience will always be an integral factor."



Privacy Policy
We have updated our privacy policy. In the latest update it explains what cookies are and how we use them on our site. To learn more about cookies and their benefits, please view our privacy policy. Please be aware that parts of this site will not function correctly if you disable cookies. By continuing to use this site, you consent to our use of cookies in accordance with our privacy policy unless you have disabled them.