Turning Lessons Learned into Early Security Action
All News
OperationsNovember 6, 2026

Turning Lessons Learned into Early Security Action

Secretary General Grant discusses how digital technology could connect warning signs with coordinated responses in crowded public spaces and supply chains

In a busy transportation terminal or a complex supply chain, an emerging problem may first appear as several small, disconnected events. A growing queue, an obstructed exit, an unexpected delivery, or an unusual vehicle movement may each deserve attention. Viewed together, they could reveal a developing situation requiring a coordinated response.

Secretary General Jay Grant sees an opportunity to use digital technology (DT) to connect those signals and deliver useful information to the people responsible for acting. The proposed approach would draw on 87 identified lessons learned from mass gathering and supply chain environments, translating experience into indicators, decision support, and response procedures.

“Lessons learned must become lessons applied,” Grant explains. “Our objective is to turn that experience into timely information that helps personnel recognise a developing concern and coordinate the people and technology needed to address it. Recently we collaborated with Boman looking at the whole port picture, as security plays one part in the overall operations. It was exciting to see the whole picture. The outcome, done correctly, bring operational efficiency and secure and safer environments.

From experience to operational awareness

The proposed framework would begin by examining each lesson: What happened? Were there observable warning signs? What information was missing? Which actions helped, and who had the authority to take them?

Those findings could help define what to monitor, which combinations of events warrant attention, and how concerns should be escalated.

Relevant information could come from operational systems, sensors, access controls, equipment monitoring, and personnel reports. Predictive analysis could assess patterns and identify conditions that resemble previously recognised problems. Near real-time monitoring could flag changes as information becomes available, giving personnel an opportunity to investigate.

Connecting alerts with action

An effective alert should explain what has changed, where it is occurring, why it matters, and who should respond. It should distinguish confirmed information from an uncertain indication and provide enough context for personnel to exercise judgement.

For example, increasing crowd density combined with an obstructed exit could prompt an alert to a terminal supervisor. Personnel could inspect the location, clear the obstruction, and redirect arriving passengers. Authorised technology could support their actions through updated passenger messages and routing information.

In a supply chain environment, an unexpected vehicle movement combined with a delivery discrepancy could trigger a verification request. Security and operations personnel could receive the same information, check the circumstances, and coordinate the next step.

“An alert is only useful when it reaches someone who understands what it means and can act,” Grant says. “Digital technology and personnel must work in tandem, with clear responsibilities, appropriate authority, and a shared understanding of the situation.”

Working across organisational boundaries

A developing security issue may involve a port authority, transport operator, emergency services, and local government. The proposed framework would connect detection with an agreed response process across those boundaries.

Priority alerts would have designated recipients, acknowledgement requirements, and escalation routes. Personnel would need coordinate with others depending on the issue, and others themselves would have tasks if warranted. This actions would be automated within defined permissions, with consequential decisions directed to the appropriate personnel. It is essential everyone at every level is on the same page.

The framework’s usefulness depends on reliable information, proportionate monitoring, and regular testing. Managing false alarms and protecting sensitive information would be part of its operational design.

Learning from every response

Each response would provide an opportunity to improve the framework. Was the warning timely? Did it reach the correct person? Was the information sufficient? Did the action resolve the concern?

Recording those outcomes help refine indicators, alert priorities, and response procedures. The original 87 lessons comes from multiple incident over 25 years.

Grant’s proposed direction is to make accumulated experience available at the point of decision. Success would be measured by how effectively digital technology helps personnel recognise concerns, coordinate their actions, and protect people and essential operations.

base44
Edit with Base44