Cisco's Rick Geiger on Converging Physical and IT Security

The convergence of logical and physical security is a topic that for many years has resembled Mark Twain's commentary on the weather: "Everybody talks about it, but nobody does anything about it."

Today that situation is changing rapidly as companies bring converged technology platforms to market that enable businesses to achieve greater security and lower costs.

For some, convergence has been narrowly defined as assigning each employee a single credential for building access and computer login. Why not go beyond that one-dimensional view and consider an enterprise system, one that expands the promise of convergence as a business security driver? After all, consider the problems we're trying to solve. Consider the business value we're trying to deliver.

The starting point for both physical and logical security should be a threat assessment. Threats vary widely by industry and by company - a casino faces the credible threat of players attempting to defraud its business by cheating, while retail outlets worry about inventory shrinkage, point-of-sale fraud, and shoplifting - but every business must ask itself a series of questions: What are the credible threats? How can they be averted? What level of protection is needed, and at what cost? Is protection the primary goal, or is the primary goal identification and remediation? And what regulatory requirements must be considered?

IT and physical security teams are used to complete control, control of their strategy and control of their budget. And they possess vast experience in their own arenas. Imagine the power of combining the two and leveraging the strengths of both.

Fostering convergence throughout a business - becoming multidimensional with video surveillance, access control, IP networking, application security, and more - creates an interesting opportunity. By formulating an enterprise convergence plan and executing it with trust and teamwork, where each group acts as a resource for the other, security professionals can broaden their impact on a business' operational efficiency. Doing that increases their visibility, elevating them from a back-office tactical function to a strategic asset that proactively defends the bottom line and the integrity of a company's operations.

This content continues onto the next page...