The Dangers of Neglecting Physical Security

Author: ISACA
Date Published: 15 February 2021

In the age of cloud-hosted services, the Internet of Things (IoT) and remote work, cybersecurity conversations typically revolve around securing your network and devices, rather than your office building. But the events at the US Capitol Building in Washington DC, USA, on 6 January 2021 demonstrated how dismissing physical security can have grave consequences.

Physical security “boils down to unauthorized people in sensitive areas,” explains Dustin Brewer, ISACA® security expert, in the latest episode of the ISACA Podcast, “The Perils of Overlooking Physical Security.” Security specialist Frank Downs echoes this sentiment, emphasizing the importance of instilling a strong culture of cybersecurity within the employees at your organization. “When you have certain policies and procedures that should be followed, at the end of the day, it’s going to come down to the people who are responsible for following and implementing them,” Downs says.

A multilayered approach to physical security is the right one. Enterprises should consider installing gates for the exterior of the building, implementing checkpoints that record biometrics and requiring access codes to enter rooms inside the building. Another enhanced security measure is to encourage employees to clear their desktop screens, clean their desks and leave exposed white board surfaces blank.

To learn more about the importance of physical security, listen to “The Perils of Overlooking Physical Security” on the ISACA website or stream it on Apple Podcasts, Google Play, Podbean, Spotify or Stitcher.