Improve your Defenses: Building Bulletproof Security

Transcription

1 BRIVO SURVEY REPORT Improve your Defenses: Building Bulletproof Security Careless confidence? Self-assured security? Are we properly securing our facilities? PAGE 1

2 Brivo partnered with Facility Executive Magazine to poll facility managers across the United States to determine what sort of physical access control challenges they face today, and how comfortable they are with their current access control and physical security solutions. From over 300 responses we were able to pinpoint some distinct commonalities in the responses and some critical issues that need to be addressed sooner rather than later. PAGE 2

3 Ignorance is bliss. We asked facility managers how worried they were about their physical security. 61% responded that they were not worried at all. Not surprisingly, the 39% who were worried, indicated in subsequent responses that they had to manage a physical security incident in the past. A subsequent questions asked How confident are you that the right people are accessing your facilities? Only 54% were very confident. 61% of survey respondents said they were not worried about their physical security. 54% are very confident that only the right people are accessing their facilities. The challenge we would like to pose to those facility managers that aren t worried and are confident is: What would your response be if you had experienced a security incident in the past? PAGE 3

4 Evolution? Modern technology? A facility manager craves not these things! Our survey respondents split into two separate tracks; those facility managers who have deployed an electronic access control solution and those that still use standard lock and key solutions. Support Your Local Locksmith. This number is much higher than we had anticipated. Granted, standard lock and key solutions have been around for millennia and are a proven technology. However, they have some very distinct limitations and inherent risks associated with them: Easy to duplicate, lose and share If lost, duplicated or shared, you have to rekey all of your doors You cannot let people into your facility remotely You cannot track who has entered or exited your facility You cannot verify anyone s identity You are unable to deploy a second layer of security control other than a physical guard 40% of survey respondents still use a simple lock and key solution. The challenge we would like to pose to the 40% that still manage their facility using technology invented by the ancient Egyptians (yeah Cleopatra s facility manager had a key ring) is: Are you sure that lock and key is the best way to secure your business today? PAGE 4

5 Do you want to avoid security risks? Do you want to start conducting a preemptive security practice versus a reactive one? You can save thousands of dollars and hundreds of headaches by deploying an electronic access control solution to manage who gets in and out of your facility. I m hip, I m with it. I got my GED in physical security my Good Enough Diploma! Of the 60% of respondents who do have an electronic access control solution deployed, 62% are using a standard on-premise solution with key cards or fobs. It s a good start. You ve made it to the 20th century. The 1970 s, when standard ID cards and fobs were invented and became widely used, was an awesome decade, relived in beautiful comedy in That 70 s Show (actually, let s be honest, we all watched it for Mila Kunis). But let us ask you this, would you rather be driving a 1970 s Ford Pinto that putters around town and frequently breaks down, or a beautiful fast, well featured 2017 Mustang with a 5.0 V8 that growls so beautifully from two chrome exhaust tips? Let s break this down a little bit: why are standard key cards only good enough? Yes, you can deactivate them remotely, and you don t have to re-key your doors if they are lost or stolen. However, they are only better than lock and key when users report them lost or stolen. If you don t have a video system or a guard on duty, you cannot verify the person s identity. You also can t let people in remotely if they forget their key card at home. Beyond this, standard 62% of respondents are using standard key cards or fobs. 68% of respondents are worried about lost or stolen key cards. 32% of respondents are worried about employee abuse (e.g. sharing or tailgating). key cards and fobs can be easily duplicated by those folks who are moderately resourceful and have the drive to do so. All it takes is purchasing a simple $12 product on the internet. Seriously, just search Portable Handheld 125KHz RFID ID Card Writer/Copier Duplicator. Let s break down the drawbacks of standard key cards and fobs for you: Easy to duplicate, lose, and share If lost, duplicated, or shared, you have to re-key all of your doors You cannot let people into your facility remotely You cannot verify anyone s identity You are unable to deploy a second layer of security control other than a physical guard Yes, you are correct, we copied and pasted the same list from above and just got rid of the tracking bit. But wait, there s more! Standard key cards and fobs, fueled by traditional on-premise access control solutions have even more weaknesses. In order for them to work, you have to have good physical access control policy hygiene and regular software maintenance. Nationally the employee turnover rate is 18.1%, and the national tenant turnover rate is 54%. PAGE 5

6 That means that 1 in 5 or 1 in 2 of the folks that you grant access privileges to will leave at some point. You need to be able to easily update and backup your access control privileges on a weekly basis to ensure that former tenants or employees who might have lost or misplaced their key cards or fobs don t return to wreak havoc. Let s revisit a statistic from earlier only 54% of facility managers surveyed are very confident that the right people are accessing their facility. Weekly access privilege updates are a must. Only 30% of respondents update their access control privileges weekly 36% aren t sure if they do it or never do it. Only 47% back-up their access control privileges weekly, 30% aren t sure or don t do it. The other statistic that is scary is how often facility managers update their access control solutions firmware. Updates should be done at least quarterly. Only 23% of respondents do so. This leaves your security system weak and easy to manipulate. Hackers can get into these systems easily. All they have to do is log into your guest WiFi and access an insecure API (Application Programming Interface) and remotely unlock the door. All that is really required is an on-premise access control solution that hasn t been updated and has known weaknesses, or even just one with an open port. Boom. He s in and he can do what he wants within your own four walls. What type of facility would you rather manage, the submarine with screen doors, or the space shuttle with the bulletproof airlock? 77% of respondents do not update their on-premise access control solution firmware quarterly. The challenge we would like to pose to those still using standard access cards and fobs without proper access control hygiene and maintenance is: Do you want to continue to make it easy for the bad guys to get in? Do you want to commit your career to manual firmware updates and manual policy updates? PAGE 6

7 There is a better way. You want the space shuttle with the bulletproof airlock, right? It exists. Here s what you ve been looking for all these years to make your job easier and look like a rock star in front of your manager. Let s line up what key features you need from your physical access control solution based on the survey responses: Allows for multiple forms of authentication (card or fob, plus biometric or pin) Automatic firmware updates Easy to manage across multiple facilities, or Integration with tenant management, or HR software to automatically update access control policies Remote door unlocking Remote administration Multi-site management Real-time access control data Compatible with secure access control credentials What you need is a cloud-based physical access control solution that can do all this and more. PAGE 7

8 The Brivo way. You need Brivo OnAir R. Brivo OnAir is a cloud-based modern unified security platform that combines physical access control and video monitoring. The Brivo OnAir solution is built for today s connected facility managers. From unlocking doors, to recording surveillance video, to giving access permissions to new employees and contractors, Brivo offers a secure physical access control solution through the cloud. Remotely Managed Access Control Brivo OnAir allows you to control and manage access to your facility or facilities from anywhere, using your smartphone or browser. You can monitor live video streams, create customized security reports, and setup real-time notifications. With Brivo OnAir you will no longer have to visit a facility to grant your people, vendors, and contractors access. You can let them in via our web interface, from your laptop, tablet, or mobile phone. If your security policy allows you to, you can also eliminate the inconvenience and expense of issuing access cards or fobs with the Brivo Mobile Pass App, which lets your colleagues open doors with their smartphone. Enforce Access Rules and Security Brivo OnAir provides real-time reporting on who has entered or exited your facility. In the event of an emergency, you can lock down the building remotely without having to be there. Beyond this, if you notice that a tenant or employee is sharing access credentials, or has lost access credentials, you know who to retrain on access rules, and can deactivate access cards from any web-browser. Automated Maintenance Brivo OnAir does not require you to manage local servers that cost thousands of dollars per year to run. OnAir s cloud-based infrastructure ensures that our software is always up to date. Gone are the days of labor intensive software updates or hardware maintenance. PAGE 8

9 Simple Administration and Available Automation Brivo OnAir can be managed from the Brivo OnAir Mobile Application. You can deactivate users on the spot from your mobile phone. You don t have to remember to do so the next time you visit your facility. Brivo also integrates with third party technologies like HR systems and tenant management systems, so that when an employee leaves, his facility access privileges are automatically deactivated at the corporate level without you having to lift a finger. Compatible with Secure Credentials Brivo OnAir integrates with HID iclass Seos credentials and readers so that our customers can take advantage of the strongest authentication for securing physical access to facilities. HID iclass Seos credentials and readers have not been hacked or duplicated. You can rest easy that only the right people will be using your assigned credentials to get into your facilities. D- to C+ security is not enough. Let s close this out by reminding ourselves of a few statistics. 60% are not worried about their facility security as long as they haven t experienced a security incident. 54% are confident they are only letting the good guys in. 77% of access control users are not updating their firmware enough, and 47% only back up their privileges weekly. What the survey told us is that facility managers today are scoring a C+ to D- in their physical security. To better secure our facilities, we can t rely on trust and confidence. We can t simply build a stronger wall, and we can t overcome security challenges by using antiquated technologies. We need to upgrade to modern unified security solutions that do the heavy lifting for us. Brivo can provide you with the simply better security that you need to protect your facilities. Learn more about Brivo OnAir Discover how Brivo OnAir can enable building access control to unite your facilities, secure your assets, and protect your people. Request a Demo PAGE 9