DECEMBER 2022ENTERPRISE SECURITY| | 9PhySec and developing an enterprise-wide solution to company threats. At the end of the day, we (CyberSec and PhySec) have a similar mission and tend to respond and handle incidents in a similar way. Ex. Someone gets through a firewall or breaks into a building. We both want to identify where and how they got in, if they're still in, what was taken, how they got out and who they are. WHY IS CONVERGENCE IMPORTANT? Convergence makes your security organization stronger and more resilient - Your organization will benefit from a balanced security team, refined crisis response team, unified approach to security initiatives, and cost-saving by consolidating and/or eliminating duplicative measures and improved efficiency by tearing down silos. Your security professionals (Cyber or Physical) will be able to speak intelligently to any security threats facing the organization and be able to provide solutions so that an informed decision can be made. Bringing these two departments together is also beneficial when it comes to budgets. The common practice of siloing these two departments potentially results in underfunding one over another, which decreases the effectiveness of the organization's security posture. Those organizations with converged cyber and physical security functions are more resilient and better prepared to detect, deter, deny, delay, or proactively respond to threats.CONVERGENCE?! IS IT THE RIGHT PATH FOR MY ORGANIZATION?WHERE DO WE EVEN START? Honestly, it starts with you. I started two years ago by reaching across the aisle to my internal CyberSec partners and talking about our commonalities. Two years later we are continuing down a path to convergence together: Areas we Must Converge Where is cross-pollination already occurring, such as (but not limited to); Common language/terminology (defining) Incident Response Framework Business Continuity and Resiliency Planning Project Management Tabletop and Field Training Exercises Areas We Should and Would Benefit from Converging Identifying swimlanes/roadmaps which align with the company mission Security Operation Centers and Tooling Shared resources (ex. analysts) Shared space Incident Reporting Systems Incident Management Systems Mass Communications Systems Even if you believe a full convergence is not right for your department or organization, do not let it stop you from building relationships or leveraging the knowledge held by CyberSec. Do customer walks with your CyberSec team to view how they look at physical security risks - especially in the Internet of Things space. Share what you see with them. Find a way to implement their risk viewpoint into how your team patrols/reports issues. Leverage your system tools to identify and report issues or concerns to their team. Invite them to participate in PhySec tabletop and/or field training exercises. Ask to have visibility on incidents or be a fly on the wall during an after-action debrief to see how they approach, resolve, and mitigate incidents. If you have the appetite and budget, hire a specialized consultant to conduct a convergence workshop with your combined teams. Sometimes an outside perspective can be a good way to get people thinking. Do not wait 13 years or feel that you can not make a change in this industry. Even if you/your company is not considering convergence, my challenge to you is to share these ideas with your industry peers and those within your security organization and see what kind of tangible benefits you can identify for your organization. ESCONVERGENCE MAKES YOUR SECURITY ORGANIZATION STRONGER AND MORE RESILIENT - YOUR ORGANIZATION WILL BENEFIT FROM A BALANCED SECURITY TEAM, REFINED CRISIS RESPONSE TEAM, UNIFIED APPROACH TO SECURITY INITIATIVES, AND COST-SAVING
< Page 8 | Page 10 >