FMJ Facilities Management magazine providing industry-specific intelligence to FM and property professionals
THE INSIDER THREAT
While external threats are a big focus for security teams, the inside threat must not be overlooked. The recent increase in cyberattacks means physical security equipment has now become a potential entry point to networks and critical infrastructure.
It might seem ironic that a physical security solution designed to protect people and property can be the subject of a cyberattack, but seeing that these systems are increasingly connected to networks and IT infrastructure, they can be vulnerable to breaches. No access control provider will be able to perfect a product with no vulnerabilities, but they should have solid protections in place as well as a process that quickly and completely addresses any vulnerability.
When choosing a physical security system, it is crucial to consider the cybersecurity needs, or the ‘security of security’. It’s estimated that 74 per cent of data breaches start with privileged credential abuse. Businesses in particular have become the main target for cyber-criminals in 2019, making it critical to be increasingly aware and vigilant of insider threats to security.
Businesses hold huge amounts of valuable data, and with cyber-criminals fully aware they also hold the funds to pay ransoms, it makes them a prime target. Modern access control has the ability to mitigate this threat. By choosing a provider that offers protection against cyberthreats with end-to-end encrypted communications for software and hardware, secure claims-based authentication, as well as digital certificates, facilities managers can do much to safeguard their IP. Regular penetration tests aimed at trying to catch vulnerabilities on their own are also essential, as this can eliminate a breach before it happens.
To summarise, a unified security platform displaying all desired information on one single interface allows security officials and facilities managers to have eyes everywhere, significantly improving response times and operations in general. Choosing an IP-based access control solution compatible with any hardware provides the flexibility needed in the ever-changing security environment, without exhausting budgets by investing in new hardware every time a system update is needed.
With advanced cyber-security measures in place to protect these physical security solutions, you’ll have built a layered security system capable of mitigating threats posed to your building while making daily operations smoother than ever before.
ACCESS CONTROL
Refers to the way we limit access to systems or resources such as office buildings. Access control can grant or block users from admission or information. With access control systems in place, users are required to present their credentials before they can be granted permission. These credentials come in many forms, from simple key-lock solutions to biometric identification systems such as facial recognition or fingerprint ID. An advanced system not only decides who can gain access to a certain resource, but also monitors what they do once inside the building or system.
IP-BASED SYSTEM
The internet protocol (IP) is the method by which data is sent from one computer to another on the internet. Each computer on the internet has at least one IP address that uniquely identifies it. Access control systems using IP are digital systems often used for surveillance purposes, and can send and receive data via a computer network and the internet – making it by far the fastest method of moving information around. High-performance IP-based access control solutions leverage the network and are therefore easy to install and manage while providing a cost-effective access control system that grows with the organisation’s needs.
Migrating from an existing legacy access control system to an IP-based one comes with many benefits. In addition to significantly enhancing overall operations, it expands and customises physical access control infrastructure, which allows the system to take advantage of new access control capabilities such as efficient multisite management and Power over Ethernet technologies. IP-based systems make it easier for organisations to operate, expand, and customise physical security and access control according to changing needs, as it does not bind the user to any particular system.
PRIVILEGED CREDENTIAL ABUSE
Privilege, in an IT context, can be defined as the authority given to an account, system or area within a network. Privileges enable users to access certain areas and resources within the company. However, they also open the door for potential misuse, both from the inside and outside. Privileged credential abuse refers to the way in which unauthorised individuals such as cyber criminals gain access to these systems. Seventy-four per cent of data breaches reportedly start with privileged credential abuse, putting even access control at risk due to technological advancements.
Privileged access management is one way of mitigating the risk of credential abuse. It comprises the cybersecurity strategies and technologies for exercising control over the privileged access rights and permissions for users.
