Dissecting the Advantages

Realizing the cost benefits for small- and medium-size businesses

Physical identity access management (PIAM) solutions have changed the way leading organizations approach security. In recent years, advances in PIAM software and related technologies have not only improved the accuracy and capabilities of these powerful systems, but they have also brought the cost within reach of small- and medium-sized businesses. Now, mobile access and management of PIAM systems capabilities are opening up a new way for organizations to further increase their productivity and speed up responses to system alerts.

Here are four advantages of mobile PIAM that offer organizations new capabilities for improving their security posture.

Convenience

Security staff has a wide variety of important tasks to accomplish, and that not all of these activities take place at their desks. Instead, staff can be on the move throughout the day, involved with supervision, training, inspections, and many other tasks in the course of their work. If access to the PIAM system was only available at the security office, then it would only be possible to update the system with new information, or take action on approval requests, from that location. This limitation could mean that important updates would be delayed until an officer with the information returns at end-of-shift, or until they could be relayed to a staff member who is actually in the office.

Providing access to the PIAM system through a mobile device provides a much higher level of convenience. Mobile access lets them accomplish relevant system tasks from any location at the time they find the need. For example, reporting lost badges or lost and found items. Mobile access also lets them respond immediately to time-sensitive system tasks, such as responding to system alerts or approving or denying access requests.

Thus, the convenience of mobile access is not just a ‘feelgood’ benefit—there is a real positive impact on productivity and effectiveness.

Improved Security

In the past, security forces shared information at daily briefings, through reports, and other traditional methods. Today, a mobile security force may still start their shift with a daily briefing, but that force relies upon many more information updates during the day to understand the ever-changing current situation and shifting priorities, and to manage developing needs and incidents.

If such security officers have real-time access to the PIAM system, then they will have access to the most up-to-date status and relevant information, leading to an improved level of security. And, officers that are so equipped can make decisions and take actions with confidence, thereby improving their effectiveness.

As an example, it is still relatively common for security guards at entrances to sports facilities, outdoor festivals, construction sites, and similar situations to rely on physical lists of authorized visitors that are used to control entry and access to these sites. This low-tech approach appears to save money but exposes the organization to glaring security gaps. And, because the lists are prepared in advance, it is difficult to update them, categorize visitors with different access levels, correct errors, and so on. These time lags are not just inconvenient—they actually create security risks and interfere with the ability of the security guards to do their jobs.

With mobile PIAM, these security risk loopholes are closed. PIAM solutions ensure identities are properly vetted and authenticated before issuing a credential or allowing access. The same policies and procedures of authentication and verifying are extended into the mobile environment. For example, as part of an event registration process, attendees might be required to upload a photo ID. When their temporary event credential is issued, it would include a barcode and when scanned, the profile of the person quickly appears on the mobile device of security staff. In this way, security staff can quickly confirm that the person presenting the credential is the authorized person. Color coding on the mobile device can also help with rapid vetting. For example— by providing a green for approved—security simply verifies the photo matches the person and allows entry. If orange or red appear on their device upon scanning, they can take the necessary precautions and deny entry.

Greater Efficiency

Even with improved security, many organizations will not be satisfied with a solution that slows down established processes or extends wait times. Mobile PIAM is one of those rare solutions that delivers on both counts, providing improved speed and ease of access while also delivering stronger security. The flexibility offered by mobile PIAM also delivers efficiencies and convenience for updating identities and access privileges. Rather than having to go to a desk to add or remove an identity from a PC, authorized employees can make changes directly from their phone or tablet.

As an example, at the 2016 Summer Games held in Rio, Brazil, mobile PIAM was deployed to manage the identities and track the movements of approximately 500,000 credentialed individuals, allowing them to come and go from the various venues. During the events, security and event staff used handheld devices to verify identities nearly 3 million times, ensuring that every badge was authentic. By connecting to the PIAM system, all of these mobile devices were assured of having the latest, up-to-theminute information, and discrepancies could be investigated and resolved immediately.

In all, the solution deployed at the Games flagged about a dozen problems with badges, most of which were minor, as well as one more serious incident in which a number of people attempted to falsify others’ credentials to enter a basketball game. Thanks to the software and mobile capabilities, these anomalies were caught instantly.

Actionable Intelligence

As mentioned earlier, PIAM software uses risk profiles to analyze data from physical security and logical/IT systems across an organization. Using this analysis, PIAM systems can detect and identify irregular behaviors based on set policies and parameters that have been predetermined by management. If a behavior anomaly is identified, the PIAM software provides an alert to security management with the information they need to investigate and if appropriate, take action. Mobile PIAM takes this one step further to deliver alerts in real time to the designated security staff, including not only management, but also to security officers in the field and on site.

As an example, consider what might happen if an individual is using credentials to enter restricted areas they are not authorized to access. A PIAM software system could correlate these events and alert security to look for abnormal network activity. If the flagged physical and IT access activities are connected, security can immediately and automatically respond by deactivating the individual’s ID badge and access privileges to company digital information.

A mobile alert can also be sent to the security officers on duty to investigate and take appropriate action, such as removing the person from the premises, or detaining the individual until police arrive. In either case, providing the officers on scene with access to the PIAM system information equips them to better evaluate the situation and take appropriate actions. As advanced PIAM solutions continue to improve their ability to detect anomalies and provide actionable intelligence, it becomes ever more important to get that intelligence quickly into the hands of the security staff that will put it to use. Mobile PIAM offers a powerful, efficient and cost-effective way for organizations to capitalize on the strengths of PIAM from anywhere, at any time.

This article originally appeared in the February 2017 issue of Security Today.

Featured

  • Why Communication is Key in an Emergency

    During an emergency, communication with the outside world can be a critical component when it comes to response time and saving lives. Emergency communications typically consist of alerts and warnings; directives about evacuating the premises; information about response status, and other matters that can impact response and recovery. Read Now

  • Trust But Verify

    Today’s world is built on software—whether it is third-party applications, open-source libraries, in-house developed tools, operating systems, containers or firmware. Organizations worldwide depend on these diverse software components to power their operations, connect with customers, and drive innovation. However, this reliance on software comes with hidden dangers: the blind trust placed in these software products. Many companies assume that the software they purchase, and use is secure and free from vulnerabilities, but recent high-profile software supply chain breaches have proven otherwise. The reality is that every piece of software, no matter how reputable the source, increases the organization’s attack surface and poses new risks. Read Now

  • Impact on Digital Transformation

    A 2023 Statista report projects that by 2030 there will be 30 billion Internet of Things (IoT) devices in use. That is three times as many as there were in 2020. The numbers continue to grow because connecting sensors and systems, especially across a business, promises big efficiency gains and new insights. As such, the IoT and IIoT (Industrial Internet of Things) have become a launching pad for digital transformation -- not only for individual organizations but for entire industries. Read Now

  • Optimizing Security and Business Performance with Clarity and Control

    In recent years, the security sector has experienced a significant influx of innovative technologies that have fundamentally transformed how organizations design, implement, and oversee their security programs. The widespread adoption of cloud-based infrastructure, edge processing, and AI or machine learning (ML) driven analytics has brought about revolutionary changes in applications such as access control, video surveillance and emerging areas like threat detection and drone identification. Read Now

Featured Cybersecurity

Webinars

New Products

  • HD2055 Modular Barricade

    Delta Scientific’s electric HD2055 modular shallow foundation barricade is tested to ASTM M50/P1 with negative penetration from the vehicle upon impact. With a shallow foundation of only 24 inches, the HD2055 can be installed without worrying about buried power lines and other below grade obstructions. The modular make-up of the barrier also allows you to cover wider roadways by adding additional modules to the system. The HD2055 boasts an Emergency Fast Operation of 1.5 seconds giving the guard ample time to deploy under a high threat situation. 3

  • Mobile Safe Shield

    Mobile Safe Shield

    SafeWood Designs, Inc., a manufacturer of patented bullet resistant products, is excited to announce the launch of the Mobile Safe Shield. The Mobile Safe Shield is a moveable bullet resistant shield that provides protection in the event of an assailant and supplies cover in the event of an active shooter. With a heavy-duty steel frame, quality castor wheels, and bullet resistant core, the Mobile Safe Shield is a perfect addition to any guard station, security desks, courthouses, police stations, schools, office spaces and more. The Mobile Safe Shield is incredibly customizable. Bullet resistant materials are available in UL 752 Levels 1 through 8 and include glass, white board, tack board, veneer, and plastic laminate. Flexibility in bullet resistant materials allows for the Mobile Safe Shield to blend more with current interior décor for a seamless design aesthetic. Optional custom paint colors are also available for the steel frame. 3

  • 4K Video Decoder

    3xLOGIC’s VH-DECODER-4K is perfect for use in organizations of all sizes in diverse vertical sectors such as retail, leisure and hospitality, education and commercial premises. 3