Rosen Security pitches risk-assessment approach for Hillsborough County libraries under RFP 24-24865

Rosen Security Consulting presented its proposed security risk assessment for Hillsborough County Library Services on Oct. 12, outlining a risk-based methodology, deliverables and two scope options tied to RFP 24-24865.

Michael Rosen, president of Rosen Security Consulting, told the county procurement committee the firm would deliver individual reports for each site assessed and an overarching organizational report, and said the company can meet the RFP's six-month requirement. “We understand the 6 months requirement that is set forth in that RFP, and we believe we can, we can definitely nail it,” Rosen said.

Rosen emphasized a preventive, risk-based approach that ranks recommendations by their likely reduction of risk rather than by cost or ease of implementation. “The best security strategy is the one that is focused on preventing security incidents,” he said, adding that recommendations will balance human factors, physical measures and technology.

Under the proposal, Rosen would perform a threat assessment using historical incident data and a crime-forecasting product (Cap Index/CrimeCast), conduct site visits to every library in scope, interview organizational and site decision-makers, and produce qualitative and quantitative risk analyses and prioritized budgets. Rosen said budget estimates would be schematic-level (about 95% accuracy at that stage) and that detailed, vendor-level cost estimates would follow later in design phases.

The firm offered two scope options in its proposal: a base option to assess at least 10 libraries and an extended option to assess more than 26 branches plus organization-level analysis. Rosen said the larger option would add roughly two weeks to the timeline compared with the 10-branch schedule.

Rosen described optional add-ons including “red-team” style assessments or accessibility tests at higher-risk branches, and post-report support. He said the investment options in the proposal include all project expenses and an 80-hour allowance for post-proposal consultation, and that Rosen could assist with vendor selection and evaluation in later implementation stages.

Committee members asked about Rosen's library experience and implementation outcomes. Rosen cited prior work in Garland and Dallas, Texas, and other municipalities, describing recommendations ranging from reorganizing furnishings and improving lighting to unifying surveillance systems into centralized platforms and assigning city marshals to library security. “We helped them unify this in a centralized platform and work with the city to make the library part of the overall city surveillance system,” he said.

On training and the human element, Rosen said de-escalation, situational-awareness and behavioral-threat assessment training are central to the firm's recommendations: “Many times we can avoid it. We can deescalate most of the situations by simply being there, listening, allowing the people to be seen and heard.” He said Rosen provides training and can recommend specific vendor solutions during implementation, though the risk-assessment report will focus on functional requirements rather than brand names.

Procurement staff confirmed the oral-presentation process is recorded and that the county's cone-of-silence remains in effect for the procurement. Sakina Ford, identified as the county's chief buyer, opened the session and moderated committee introductions. Jennifer Cable, project manager of safety and security for Hillsborough County Libraries, and other county staff participated in the question-and-answer period.

The committee did not take action at the meeting; Rosen's presentation and the committee's questions will be part of the procurement record as the county completes all oral presentations and posts recordings for public review.

Ending: The procurement committee closed the session after questions. County staff said recordings of all oral presentations will be published after the presentation phase concludes.