{"id":9314,"date":"2020-10-28T03:25:48","date_gmt":"2020-10-28T03:25:48","guid":{"rendered":"https:\/\/citysecuritymagazine.com\/?p=9314"},"modified":"2022-10-28T10:46:14","modified_gmt":"2022-10-28T09:46:14","slug":"enterprise-security-risk-management","status":"publish","type":"post","link":"https:\/\/citysecuritymagazine.com\/editors-choice\/enterprise-security-risk-management\/","title":{"rendered":"Enterprise Security Risk Management"},"content":{"rendered":"

A holistic approach to security<\/h1>\n

\"\"
\nAs a physical security practitioner can you honestly say that you and your organisation approach security in an integrated way to keep across developing threats?<\/p>\n

Or do you stay in your lane and leave the IT department to do their own thing?<\/p>\n

Security departments must be more open to dealing with threats holistically rather than through their own historical lens.<\/p>\n

One solution is to take an Enterprise Security Risk Management (ESRM)* approach, which according to Brian Allen and Rachelle Loyear in their book, The Enterprise Security Risk Management, is: \u201cthe application of fundamental risk principles to manage all security risks \u2013 whether related to information, cyber, physical security, asset management, or business continuity \u2013 in a comprehensive, holistic, all-encompassing approach\u201d.<\/p>\n

This holistic approach is important because it ensures you understand not only how physical vulnerabilities can risk the security of the network, but also how network vulnerabilities could impact your physical security systems. Some of the targeted attacks that interfere with your systems could be in support of a physical attempt to access your network or workstations.<\/p>\n

For example, Access Control Systems using RFID readers are at risk of the employees\u2019 cards being cloned via devices readily available on the internet. A cloned card will provide access to all areas of the building that your real employee has. If they are a member of the IT department this could include your server room.<\/p>\n

If you Google \u201cwatch live security cameras in the UK\u201d you will find a site offering views from over 250 cameras in the UK, as well as views from over 100 countries. In 2018 it was showing live views from three schools in the UK. Hackers will use software such as Angry IP or websites like Shodan to scan for the IP addresses of visible cameras or NVRs. They will often try the manufacturer\u2019s default password first to see if a lazy installer has left this in place. If that does not work hackers will work with specially developed exploit tools to gain access.<\/p>\n

Improvements in IT security have resulted in increased reports of hackers attempting physical intrusion to organisations\u2019 facilities to gain access to their networks. There are many variations on this, from straightforward walk-ins to more developed pretext approaches to gain \u201clegitimate\u201d access. Once on site, access to workstations will allow malware or monitoring devices to be placed. Given enough time onsite, (reportedly four hours), a hacker could break into the corporate Wi-Fi.<\/p>\n

With the COVID-19 situation, we have seen a huge surge in home working. It is probable that your IT department has ensured colleagues are working through VPNs rather than logging on directly to minimise the danger of their home network being hacked. This is particularly important for those employees who may be working on very sensitive projects. They should also be ensuring that security updates are installed.<\/p>\n

There are other security factors which need to be considered with home working such as secure disposal of any documents that may have been printed out. Depending on the sector you operate in, this could involve your price sensitive or secret information going into domestic rubbish. There is also the danger of GDPR breaches either in hard copy or by unauthorised family and friends potentially seeing on-screen information.<\/p>\n

Encouraging the right security culture amongst all the workforce is a great way to improve enterprise security. By understanding what is wrong and knowing whom to report it to when they spot it, the effectiveness of the organisation\u2019s overall security stance will be improved. It is important for the security team to be a key part of any induction process and to start introducing the right culture early on. Your marketing department may already be monitoring social media internally or by using an external agency. Liaise with them so they can include certain words or phrases that could give you early warning of developing threats against your organisation.<\/p>\n

All of these points are about looking ahead and assessing the events that could happen and not just relying on the traditional security mindset of protecting against what has happened historically. To be truly effective this needs to happen across the enterprise and there is a strong case for this to start in the security department. Reach out to your colleagues in IT to better understand each other\u2019s concerns and mitigation strategies.<\/p>\n

I would also advocate developing a risk register that is regularly reviewed and updated. By making this a dynamic and relevant document you will develop a more efficient and prepared organisation.<\/p>\n

*If you are interested in learning more about ESRM, visit the ASIS website.<\/p>\n

www.asisonline.org\/publications–resources\/esrm\/<\/a><\/p>\n

Mike O\u2019Neill<\/p>\n

Managing Director<\/p>\n

Optimal Risk<\/p>\n

www.optimalrisk.com<\/a><\/p>\n

For further reading, see our Risk Management category<\/a><\/p>\n

\"\"<\/a><\/p>\n","protected":false},"excerpt":{"rendered":"

A holistic approach to security As a physical security practitioner can you honestly say…<\/p>\n","protected":false},"author":19,"featured_media":9428,"comment_status":"closed","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"_acf_changed":false,"om_disable_all_campaigns":false,"footnotes":""},"categories":[2,12234,35],"tags":[],"class_list":["post-9314","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-editors-choice","category-optimal-risk","category-risk-management"],"acf":[],"yoast_head":"\nEnterprise Security Risk Management - City Security Magazine<\/title>\n<meta name=\"description\" content=\"Enterprise Security Risk Management: a holistic approach to ensure you understand all vulnerabilities and their impact.\" \/>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/citysecuritymagazine.com\/editors-choice\/enterprise-security-risk-management\/\" \/>\n<meta property=\"og:locale\" content=\"en_GB\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"Enterprise Security Risk Management\" \/>\n<meta property=\"og:description\" content=\"A holistic approach to security As a physical security practitioner can you honestly say that you and your organisation approach security in an integrated\" \/>\n<meta property=\"og:url\" content=\"https:\/\/citysecuritymagazine.com\/editors-choice\/enterprise-security-risk-management\/\" \/>\n<meta property=\"og:site_name\" content=\"City Security Magazine\" \/>\n<meta property=\"article:published_time\" content=\"2020-10-28T03:25:48+00:00\" \/>\n<meta property=\"article:modified_time\" content=\"2022-10-28T09:46:14+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/citysecuritymagazine.com\/wp-content\/uploads\/2020\/09\/77p13.jpg\" \/>\n\t<meta property=\"og:image:width\" content=\"750\" \/>\n\t<meta property=\"og:image:height\" content=\"550\" \/>\n\t<meta property=\"og:image:type\" content=\"image\/jpeg\" \/>\n<meta name=\"author\" content=\"Contributor CSM\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:creator\" content=\"@CitySecuritymag\" \/>\n<meta name=\"twitter:site\" content=\"@CitySecuritymag\" \/>\n<meta name=\"twitter:label1\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data1\" content=\"Contributor CSM\" \/>\n\t<meta name=\"twitter:label2\" content=\"Estimated reading time\" \/>\n\t<meta name=\"twitter:data2\" content=\"4 minutes\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\/\/schema.org\",\"@graph\":[{\"@type\":\"Article\",\"@id\":\"https:\/\/citysecuritymagazine.com\/editors-choice\/enterprise-security-risk-management\/#article\",\"isPartOf\":{\"@id\":\"https:\/\/citysecuritymagazine.com\/editors-choice\/enterprise-security-risk-management\/\"},\"author\":{\"name\":\"Contributor CSM\",\"@id\":\"https:\/\/citysecuritymagazine.com\/#\/schema\/person\/1b424dabf8b3cf40177efb7350e059f2\"},\"headline\":\"Enterprise Security Risk Management\",\"datePublished\":\"2020-10-28T03:25:48+00:00\",\"dateModified\":\"2022-10-28T09:46:14+00:00\",\"mainEntityOfPage\":{\"@id\":\"https:\/\/citysecuritymagazine.com\/editors-choice\/enterprise-security-risk-management\/\"},\"wordCount\":797,\"publisher\":{\"@id\":\"https:\/\/citysecuritymagazine.com\/#organization\"},\"image\":{\"@id\":\"https:\/\/citysecuritymagazine.com\/editors-choice\/enterprise-security-risk-management\/#primaryimage\"},\"thumbnailUrl\":\"https:\/\/citysecuritymagazine.com\/wp-content\/uploads\/2020\/09\/77p13.jpg\",\"articleSection\":[\"Editor's Choice\",\"OPTIMAL RISK\",\"Risk Management\"],\"inLanguage\":\"en-GB\"},{\"@type\":\"WebPage\",\"@id\":\"https:\/\/citysecuritymagazine.com\/editors-choice\/enterprise-security-risk-management\/\",\"url\":\"https:\/\/citysecuritymagazine.com\/editors-choice\/enterprise-security-risk-management\/\",\"name\":\"Enterprise Security Risk Management - City Security Magazine\",\"isPartOf\":{\"@id\":\"https:\/\/citysecuritymagazine.com\/#website\"},\"primaryImageOfPage\":{\"@id\":\"https:\/\/citysecuritymagazine.com\/editors-choice\/enterprise-security-risk-management\/#primaryimage\"},\"image\":{\"@id\":\"https:\/\/citysecuritymagazine.com\/editors-choice\/enterprise-security-risk-management\/#primaryimage\"},\"thumbnailUrl\":\"https:\/\/citysecuritymagazine.com\/wp-content\/uploads\/2020\/09\/77p13.jpg\",\"datePublished\":\"2020-10-28T03:25:48+00:00\",\"dateModified\":\"2022-10-28T09:46:14+00:00\",\"description\":\"Enterprise Security Risk Management: a holistic approach to ensure you understand all vulnerabilities and their impact.\",\"breadcrumb\":{\"@id\":\"https:\/\/citysecuritymagazine.com\/editors-choice\/enterprise-security-risk-management\/#breadcrumb\"},\"inLanguage\":\"en-GB\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\/\/citysecuritymagazine.com\/editors-choice\/enterprise-security-risk-management\/\"]}]},{\"@type\":\"ImageObject\",\"inLanguage\":\"en-GB\",\"@id\":\"https:\/\/citysecuritymagazine.com\/editors-choice\/enterprise-security-risk-management\/#primaryimage\",\"url\":\"https:\/\/citysecuritymagazine.com\/wp-content\/uploads\/2020\/09\/77p13.jpg\",\"contentUrl\":\"https:\/\/citysecuritymagazine.com\/wp-content\/uploads\/2020\/09\/77p13.jpg\",\"width\":750,\"height\":550,\"caption\":\"Man with CCTV head in City\"},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\/\/citysecuritymagazine.com\/editors-choice\/enterprise-security-risk-management\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\/\/citysecuritymagazine.com\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"Enterprise Security Risk Management\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\/\/citysecuritymagazine.com\/#website\",\"url\":\"https:\/\/citysecuritymagazine.com\/\",\"name\":\"City Security Magazine\",\"description\":\"News and advice for security professionals\",\"publisher\":{\"@id\":\"https:\/\/citysecuritymagazine.com\/#organization\"},\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\/\/citysecuritymagazine.com\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"en-GB\"},{\"@type\":\"Organization\",\"@id\":\"https:\/\/citysecuritymagazine.com\/#organization\",\"name\":\"City Security Magazine\",\"url\":\"https:\/\/citysecuritymagazine.com\/\",\"logo\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-GB\",\"@id\":\"https:\/\/citysecuritymagazine.com\/#\/schema\/logo\/image\/\",\"url\":\"https:\/\/citysecuritymagazine.com\/wp-content\/uploads\/2018\/06\/header-logo-2.jpg\",\"contentUrl\":\"https:\/\/citysecuritymagazine.com\/wp-content\/uploads\/2018\/06\/header-logo-2.jpg\",\"width\":2048,\"height\":573,\"caption\":\"City Security Magazine\"},\"image\":{\"@id\":\"https:\/\/citysecuritymagazine.com\/#\/schema\/logo\/image\/\"},\"sameAs\":[\"https:\/\/x.com\/CitySecuritymag\",\"https:\/\/www.linkedin.com\/company\/city-security-magazine\"]},{\"@type\":\"Person\",\"@id\":\"https:\/\/citysecuritymagazine.com\/#\/schema\/person\/1b424dabf8b3cf40177efb7350e059f2\",\"name\":\"Contributor CSM\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-GB\",\"@id\":\"https:\/\/citysecuritymagazine.com\/#\/schema\/person\/image\/\",\"url\":\"https:\/\/secure.gravatar.com\/avatar\/267a3b16d581feb77df68e95969d9bcf7cfe93d4e2f5f699b331bf4de6a055b9?s=96&d=mm&r=g\",\"contentUrl\":\"https:\/\/secure.gravatar.com\/avatar\/267a3b16d581feb77df68e95969d9bcf7cfe93d4e2f5f699b331bf4de6a055b9?s=96&d=mm&r=g\",\"caption\":\"Contributor CSM\"},\"description\":\"City Security magazine is proud to work with contributors from across the security sector and beyond, including police forces, security associations, security providers, consultants and specialists who produce a range of varied and interesting content.\",\"url\":\"https:\/\/citysecuritymagazine.com\/author\/contributor-csm\/\"}]}<\/script>\n<!-- \/ Yoast SEO Premium plugin. -->","yoast_head_json":{"title":"Enterprise Security Risk Management - City Security Magazine","description":"Enterprise Security Risk Management: a holistic approach to ensure you understand all vulnerabilities and their impact.","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/citysecuritymagazine.com\/editors-choice\/enterprise-security-risk-management\/","og_locale":"en_GB","og_type":"article","og_title":"Enterprise Security Risk Management","og_description":"A holistic approach to security As a physical security practitioner can you honestly say that you and your organisation approach security in an integrated","og_url":"https:\/\/citysecuritymagazine.com\/editors-choice\/enterprise-security-risk-management\/","og_site_name":"City Security Magazine","article_published_time":"2020-10-28T03:25:48+00:00","article_modified_time":"2022-10-28T09:46:14+00:00","og_image":[{"width":750,"height":550,"url":"https:\/\/citysecuritymagazine.com\/wp-content\/uploads\/2020\/09\/77p13.jpg","type":"image\/jpeg"}],"author":"Contributor CSM","twitter_card":"summary_large_image","twitter_creator":"@CitySecuritymag","twitter_site":"@CitySecuritymag","twitter_misc":{"Written by":"Contributor CSM","Estimated reading time":"4 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"Article","@id":"https:\/\/citysecuritymagazine.com\/editors-choice\/enterprise-security-risk-management\/#article","isPartOf":{"@id":"https:\/\/citysecuritymagazine.com\/editors-choice\/enterprise-security-risk-management\/"},"author":{"name":"Contributor CSM","@id":"https:\/\/citysecuritymagazine.com\/#\/schema\/person\/1b424dabf8b3cf40177efb7350e059f2"},"headline":"Enterprise Security Risk Management","datePublished":"2020-10-28T03:25:48+00:00","dateModified":"2022-10-28T09:46:14+00:00","mainEntityOfPage":{"@id":"https:\/\/citysecuritymagazine.com\/editors-choice\/enterprise-security-risk-management\/"},"wordCount":797,"publisher":{"@id":"https:\/\/citysecuritymagazine.com\/#organization"},"image":{"@id":"https:\/\/citysecuritymagazine.com\/editors-choice\/enterprise-security-risk-management\/#primaryimage"},"thumbnailUrl":"https:\/\/citysecuritymagazine.com\/wp-content\/uploads\/2020\/09\/77p13.jpg","articleSection":["Editor's Choice","OPTIMAL RISK","Risk Management"],"inLanguage":"en-GB"},{"@type":"WebPage","@id":"https:\/\/citysecuritymagazine.com\/editors-choice\/enterprise-security-risk-management\/","url":"https:\/\/citysecuritymagazine.com\/editors-choice\/enterprise-security-risk-management\/","name":"Enterprise Security Risk Management - City Security Magazine","isPartOf":{"@id":"https:\/\/citysecuritymagazine.com\/#website"},"primaryImageOfPage":{"@id":"https:\/\/citysecuritymagazine.com\/editors-choice\/enterprise-security-risk-management\/#primaryimage"},"image":{"@id":"https:\/\/citysecuritymagazine.com\/editors-choice\/enterprise-security-risk-management\/#primaryimage"},"thumbnailUrl":"https:\/\/citysecuritymagazine.com\/wp-content\/uploads\/2020\/09\/77p13.jpg","datePublished":"2020-10-28T03:25:48+00:00","dateModified":"2022-10-28T09:46:14+00:00","description":"Enterprise Security Risk Management: a holistic approach to ensure you understand all vulnerabilities and their impact.","breadcrumb":{"@id":"https:\/\/citysecuritymagazine.com\/editors-choice\/enterprise-security-risk-management\/#breadcrumb"},"inLanguage":"en-GB","potentialAction":[{"@type":"ReadAction","target":["https:\/\/citysecuritymagazine.com\/editors-choice\/enterprise-security-risk-management\/"]}]},{"@type":"ImageObject","inLanguage":"en-GB","@id":"https:\/\/citysecuritymagazine.com\/editors-choice\/enterprise-security-risk-management\/#primaryimage","url":"https:\/\/citysecuritymagazine.com\/wp-content\/uploads\/2020\/09\/77p13.jpg","contentUrl":"https:\/\/citysecuritymagazine.com\/wp-content\/uploads\/2020\/09\/77p13.jpg","width":750,"height":550,"caption":"Man with CCTV head in City"},{"@type":"BreadcrumbList","@id":"https:\/\/citysecuritymagazine.com\/editors-choice\/enterprise-security-risk-management\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/citysecuritymagazine.com\/"},{"@type":"ListItem","position":2,"name":"Enterprise Security Risk Management"}]},{"@type":"WebSite","@id":"https:\/\/citysecuritymagazine.com\/#website","url":"https:\/\/citysecuritymagazine.com\/","name":"City Security Magazine","description":"News and advice for security professionals","publisher":{"@id":"https:\/\/citysecuritymagazine.com\/#organization"},"potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/citysecuritymagazine.com\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"en-GB"},{"@type":"Organization","@id":"https:\/\/citysecuritymagazine.com\/#organization","name":"City Security Magazine","url":"https:\/\/citysecuritymagazine.com\/","logo":{"@type":"ImageObject","inLanguage":"en-GB","@id":"https:\/\/citysecuritymagazine.com\/#\/schema\/logo\/image\/","url":"https:\/\/citysecuritymagazine.com\/wp-content\/uploads\/2018\/06\/header-logo-2.jpg","contentUrl":"https:\/\/citysecuritymagazine.com\/wp-content\/uploads\/2018\/06\/header-logo-2.jpg","width":2048,"height":573,"caption":"City Security Magazine"},"image":{"@id":"https:\/\/citysecuritymagazine.com\/#\/schema\/logo\/image\/"},"sameAs":["https:\/\/x.com\/CitySecuritymag","https:\/\/www.linkedin.com\/company\/city-security-magazine"]},{"@type":"Person","@id":"https:\/\/citysecuritymagazine.com\/#\/schema\/person\/1b424dabf8b3cf40177efb7350e059f2","name":"Contributor CSM","image":{"@type":"ImageObject","inLanguage":"en-GB","@id":"https:\/\/citysecuritymagazine.com\/#\/schema\/person\/image\/","url":"https:\/\/secure.gravatar.com\/avatar\/267a3b16d581feb77df68e95969d9bcf7cfe93d4e2f5f699b331bf4de6a055b9?s=96&d=mm&r=g","contentUrl":"https:\/\/secure.gravatar.com\/avatar\/267a3b16d581feb77df68e95969d9bcf7cfe93d4e2f5f699b331bf4de6a055b9?s=96&d=mm&r=g","caption":"Contributor CSM"},"description":"City Security magazine is proud to work with contributors from across the security sector and beyond, including police forces, security associations, security providers, consultants and specialists who produce a range of varied and interesting content.","url":"https:\/\/citysecuritymagazine.com\/author\/contributor-csm\/"}]}},"_links":{"self":[{"href":"https:\/\/citysecuritymagazine.com\/wp-json\/wp\/v2\/posts\/9314","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/citysecuritymagazine.com\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/citysecuritymagazine.com\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/citysecuritymagazine.com\/wp-json\/wp\/v2\/users\/19"}],"replies":[{"embeddable":true,"href":"https:\/\/citysecuritymagazine.com\/wp-json\/wp\/v2\/comments?post=9314"}],"version-history":[{"count":8,"href":"https:\/\/citysecuritymagazine.com\/wp-json\/wp\/v2\/posts\/9314\/revisions"}],"predecessor-version":[{"id":11553,"href":"https:\/\/citysecuritymagazine.com\/wp-json\/wp\/v2\/posts\/9314\/revisions\/11553"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/citysecuritymagazine.com\/wp-json\/wp\/v2\/media\/9428"}],"wp:attachment":[{"href":"https:\/\/citysecuritymagazine.com\/wp-json\/wp\/v2\/media?parent=9314"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/citysecuritymagazine.com\/wp-json\/wp\/v2\/categories?post=9314"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/citysecuritymagazine.com\/wp-json\/wp\/v2\/tags?post=9314"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}