Protecting the Infrastructure

Protecting the Infrastructure

A unified approach requires technology and organizational culture

Critical infrastructure facilities can be quite large, so protecting them is a complex challenge that demands multifaceted solutions. Robust, cybersecure technology solutions exist to protect facilities of all sizes and types but getting the most out of these solutions requires attention to the human element as well. Communication between departments, training and development of standard operating procedures and interdisciplinary data collection and analysis are all key components. The right technology, procedures, and processes can help you catch mistakes more quickly and limit or prevent vulnerabilities introduced by employees, visitors or contractors.

It may sometimes feel like IT teams are from Mars and facilities teams is from Venus, but getting all stakeholders in the same room can reveal common ground. By harmonizing security system controls, data, and analytics within one unified platform, everyone can have access to the same information via the same intuitive visual interface. This makes it much easier to get everyone on the same page.

Interdepartmental coordination is key. Security teams, facilities managers, and IT departments often operate independently and may have their own unique workplace culture that defines how they make decisions, communicate, and solve problems. Yet when these groups operate in silos, things slip through the cracks.

Unify Security Systems to Bring Siloed Teams Together
Yesterday’s security solutions can’t keep up with the challenges we face today. By leveraging new, unified security software platforms, your critical infrastructure will be better protected, and you will gain new operational insights that can help you improve workplace safety and stay ahead of regulatory changes.

Modern security systems collect lots of data from cameras, sensors, card readers, and other hardware, and these insights are good for more than just security. Cross-referencing this data can uncover meaningful insights that can improve profitability, such as identifying underutilized spaces that could be repurposed for better use. It can also help reduce nuisance alarms, by creating standard operating procedures (SOPs) that direct the system to alert security only if three or more conditions are met.

Within the unified software platform, each team or individual can set up custom filters and dashboards to spotlight the data that matters most to their work, and easily share insights with other departments or external partners. Your SOPs can be automated to streamline operations and reflect the real dynamics of your business. The system can also be set up to recognize anomalies and set alarms or triggers based on these differences so that potential threats are identified earlier.

Streamline and Modernize Compliance Practices
As the industry becomes increasingly regulated to help protect our critical infrastructure, security teams need to modernize their compliance practices with a security solution that helps them meet regulations and avoid strict penalties and fines if found out of compliance.

It is not enough to have established requirements and responses if these just gather dust on the shelf. Utilities must be able to demonstrate that events have been managed according to their security plan, and that they are in compliance with NERC, TSA or other regulations. At this point, the ability to generate comprehensive reports as well as incident management audits is key.

Whatever regulations or guidelines your organization follows, proving compliance and responding to audit requests is time-consuming. Choosing a modern, unified security software platform makes it much easier, as it is designed to record and retrieve the data you need, as well as to securely share files and reports online. The centralized database makes reporting much less time-consuming and eases the burden of compliance.

Organizations can also anticipate potential threats or challenges and use digitized SOPs to guide personnel in response to these events. In the event of an emergency or urgent situation, having a clear and consistent playbook to follow can help maintain consistency and order. It also ensures all teams, regardless of shift or location, fully understand the actions they must take to maintain compliance with all regulatory authorities.

Now is the Time to Plan for a Future Transition to Hybrid Systems
Selecting a hybrid solution may not be a current top priority or option for your organization. However, as your needs and objectives change over time, you may want to investigate a hybrid system. When moving from a legacy system, it is a good idea to invest in technology that not only meets your current needs but can be flexible and grow with you.

Cloud computing allows organizations to scale data management and storage, improve operational efficiency, enable remote monitoring of facilities and systems, and can result in lower infrastructure costs. According to a 2020 analysis by Accenture, adopting cloud technologies typically reduces IT spending by 25 to 30% and the more cloud technologies are embraced, the greater the benefits.

Yet there remains some hesitancy to make the switch. It isn’t just anxiety around change or worries about the possibility of downtime during the transition; it also includes fears about the security of cloud-based software and data storage.

A multi-layered approach to harden your security system against threats is best, including strong encryption, authentication and authorization protocols. One of the advantages of a hybrid system is that the burden of keeping up with software patches and updates rests with your software and server partners, so your IT resources can focus their time on other priorities.

Tier-one cloud service providers invest significant amounts of time and resources in ensuring the highest levels of cybersecurity. These major platform owners have teams and consultants dedicated to monitoring the latest cyber threats and initiating regular third-party penetration testing and auditing. They also actively uphold various cybersecurity compliance standards and certifications and push the boundaries of cyber resilience to help establish globally adopted best practices.

With hybrid or cloud software solutions, you always have access to the latest built-in cybersecurity features, including granular privacy controls, strong user authentication, and various system health monitoring tools. And as soon as the latest versions and fixes are available, they can be pushed immediately to your system. This helps your physical security systems remain protected against vulnerabilities.

The Importance of Good Cyber Hygiene Routines
The Achilles heel of any system is human error. Humans can be forgetful and unreliable — and hackers are happy to take advantage. According to a 2021 Verizon report on data breaches, 85% of breaches were due to human vulnerability - through phishing, social engineering, misrepresentation, or error. More than 60% of breaches involved credential data.

Protecting your critical infrastructure from these types of threats is crucial. You need a system that can converge your physical and cybersecurity plans to protect sensitive information and reduce your exposure.

Whether you use a cloud-based system, an on-premises system, or a hybrid of both, maintaining good cyber hygiene needs to be part of your organizational culture. From training and onboarding employees to the development of your SOPs, cybersecurity isn’t something you can set and forget; it requires constant vigilance and regular updates, patches, and password changes.

Thankfully, modern security software can be configured to include automated notifications and settings that remind or require staff to follow best practices or alert the appropriate team if suspicious activity is detected.

Industry Transformation Continues
Shifting consumer preferences, emerging cybersecurity threats, and evolving regulations have transformed our industry.

The continued rise in demand for renewable energy is also driving mergers and acquisitions between oil, gas, and power utilities. And as these companies converge, so do their security departments. A unified security system can help ensure a centralized, compliant, scalable security strategy. Likewise, shifting to hybrid solutions can strengthen both physical security and cyber resilience.

It doesn’t have to be an all-or-nothing choice. Choosing an open-architecture software solution allows you to position your organization to be hybrid-ready when you are ready. You can take your time to strengthen internal awareness and adoption of cybersecurity best practices and make the transition one step at a time.

This article originally appeared in the July / August 2022 issue of Security Today.

Featured

  • Maximizing Your Security Budget This Year

    7 Ways You Can Secure a High-Traffic Commercial Security Gate  

    Your commercial security gate is one of your most powerful tools to keep thieves off your property. Without a security gate, your commercial perimeter security plan is all for nothing. Read Now

  • Making Safety and Security Intrinsic to School Design

    Public anxieties about school safety are escalating across the country. According to a 2023 Gallup report, 44% of parents fear for their child’s physical safety at school, a 10 percentage-point increase since 2019. Unfortunately, these fears are likely to increase if the incidence of school tragedies continues to mount. As a result, school leaders are now charged with two non-negotiable responsibilities. The first, as always, is to ensure kids have what they need to learn, grow, and thrive. Sadly, their second responsibility is to keep the children in their care safe from threats and physical danger. Read Now

  • The Power of a Layered Approach to Safety

    In a perfect world, every school would have an unlimited budget to help secure their schools. In reality, schools must prioritize what budget they have while navigating the complexities surrounding school security and lockdown. Read Now

  • How a Security System Can Enhance Arena Safety and the Fan Experience

    Ensuring guests have both a memorable experience and a safe one is no small feat for your physical security team. Stadiums, ballparks, arenas, and other large event venues are increasingly leveraging new technologies to transform the fan experience and maintain a high level of security. The goal is to preserve the integrity and excitement of the event while enhancing security and remaining “behind the scenes.” Read Now

Featured Cybersecurity

Webinars

New Products

  • Camden CM-221 Series Switches

    Camden CM-221 Series Switches

    Camden Door Controls is pleased to announce that, in response to soaring customer demand, it has expanded its range of ValueWave™ no-touch switches to include a narrow (slimline) version with manual override. This override button is designed to provide additional assurance that the request to exit switch will open a door, even if the no-touch sensor fails to operate. This new slimline switch also features a heavy gauge stainless steel faceplate, a red/green illuminated light ring, and is IP65 rated, making it ideal for indoor or outdoor use as part of an automatic door or access control system. ValueWave™ no-touch switches are designed for easy installation and trouble-free service in high traffic applications. In addition to this narrow version, the CM-221 & CM-222 Series switches are available in a range of other models with single and double gang heavy-gauge stainless steel faceplates and include illuminated light rings. 3

  • Mobile Safe Shield

    Mobile Safe Shield

    SafeWood Designs, Inc., a manufacturer of patented bullet resistant products, is excited to announce the launch of the Mobile Safe Shield. The Mobile Safe Shield is a moveable bullet resistant shield that provides protection in the event of an assailant and supplies cover in the event of an active shooter. With a heavy-duty steel frame, quality castor wheels, and bullet resistant core, the Mobile Safe Shield is a perfect addition to any guard station, security desks, courthouses, police stations, schools, office spaces and more. The Mobile Safe Shield is incredibly customizable. Bullet resistant materials are available in UL 752 Levels 1 through 8 and include glass, white board, tack board, veneer, and plastic laminate. Flexibility in bullet resistant materials allows for the Mobile Safe Shield to blend more with current interior décor for a seamless design aesthetic. Optional custom paint colors are also available for the steel frame. 3

  • QCS7230 System-on-Chip (SoC)

    QCS7230 System-on-Chip (SoC)

    The latest Qualcomm® Vision Intelligence Platform offers next-generation smart camera IoT solutions to improve safety and security across enterprises, cities and spaces. The Vision Intelligence Platform was expanded in March 2022 with the introduction of the QCS7230 System-on-Chip (SoC), which delivers superior artificial intelligence (AI) inferencing at the edge. 3