| | JUNE - 2019ENTERPRISE SECURITY8hysical security is just as important as cybersecurity. Physical security not only stands alone as critical for organizations, but it also plays an important role in cybersecurity. In cybersecurity, we use the CIA triad ­ Confidentiality, Integrity, and Availability. Unauthorized physical access can allow a threat to compromise any of these areas. This article will define and contrast physical and cybersecurity.Physical security is protecting an organization from threats that manifest locally and physically. These types of threats can be burglars who defeat your security to gain illegal access to commit a felony. But we also need to be aware of other threats, such as car bombs, active shooters, etc. Each type of industry has specific physical threats. If you're running a hospital, your threats are active shooters, fights in the Emergency Room, or even having a helicopter crash on your helipad. A nuclear facility will have drastically different threats ­ the controls needed may also be a lot different.Our physical controls are very important ­ we must have appropriate locks, cameras, bollards, and security guards. Our locks might be a physical key. But more often it is an RFID badge, which we can log and audit. Cameras can be monitored real-time, or they just might record activity after a positive motion sensor event. Bollards can be expensive; however, they might just be worth the investment if our threats include driving a van full of explosives through our front door.Cybersecurity is addressing threats that can happen over digital means ­ the Internet or your organization's computer network. These threats manifest as ransomware, hacking into devices to steal data, modifying data, and taking down your network or your website.Again, every industry will face different cybersecurity threats. A hospital is very susceptible to ransomware ­ holding your data for ransom. A bank is always at risk of man-in-the-middle attacks ­ breaching that secure channel between your browser and the bank's web server to gather sensitive financial data.The controls we use in Cybersecurity include encryption, authentication, and access control. We protect the data as it necessarily traverses the public Internet. We ensure the Physical Security vs. CybersecurityBy Randall Frietzsche, Enterprise Chief Information Security Officer, Denver HealthIN MY OPIONIONPRandall Frietzsche
< Page 7 | Page 9 >