Connect with us

Expert Speak

The Importance of Access Control in Today’s Workplace

Published

on

Written by Firas Jadalla, Regional Director for the Middle East, Turkey, and Africa (META) at Genetec

Companies across the UAE are adapting to hybrid working models for the long-term as staff begins to return to the office. A recent survey of almost 1,100 employers and employees in the region found more than two-thirds of employers were operating with a hybrid model. However, organizations need to have a physical identity and access management system that’s adaptable and easy to use, to help manage employees’ and visitors’ flow.

Control the flow of in-office traffic throughout confinement
Securing an establishment introduces unique challenges to organizational security. With many organizations still enforcing remote work, the number of individuals allowed in a building at a given time is limited, leading organizations to apply stricter access control.

Allowing or restricting employee access to certain parts of a building is one way to maintain social distancing in an organization. Quickly and easily adjusting access management settings to control in-office flow is key, as a pandemic is unpredictable and constantly evolving.

Manage access rights remotely
The absence of on-site personnel during confinement is a crucial factor that greatly affected organizational security. Since a limited number of employees were allowed in the offices, and still are in some organizations, off-site control of an organization’s access management system is vital. With the right system, organizations can manage employee and visitor access remotely. This allows for enhanced control of organization’s access rights, no matter the location.

It’s important to trust a security system’s versatility, especially throughout an evolving situation like the one we’re currently facing. Organizations need to adjust employee and visitor access settings accordingly, to maintain the safety of employees and establishment while complying with evolving local regulations.

Maintain a flexible system
This gradual shift back to in-office work requires an easy-to-use security system that can restrict office access without delay, and help comply with local regulations while minimizing security risks. Because most organizations are entering into a hybrid work model, their access management settings will face regular updates. Organizations need to be able to control employee and visitor access on a detailed level easily.

For example, organizations can remotely manage employee access in property areas by limiting or allowing employee access to the different office parts. Also, when visitors enter an establishment, they’re able to check themselves in and notify their host using the self-service portal. This alleviates the task from the front-desk staff while also enhancing the visitor’s experience.

Genetec introduced their Occupancy Management Package recently, which includes analytics and reporting tools that enable organizations to tap into their security system to count the number of people in a business area. It also allows organizations to visualize data, and alert employees when occupancy limits are reached. Audit reports can also be easily produced to demonstrate a business’ compliance with physical distancing regulations.

Preparing for the next hiring wave
Physical identity and access management are essential to maintaining visitors and employees’ flow throughout a property area. This is especially true when new employees are being hired. Quickly and efficiently setting up access rights for new employees requires an adaptable, easy-to-use access control system — especially if a firm is hiring more employees than usual, which might be the case if hiring operations were affected by the pandemic.

An organization’s security system is a complex machine made up of many moving parts. Physical identity and access management is a gear in that machine — one that requires a flexible and easy-to-use system, especially throughout a pandemic. Access rights evolve through the confinement and deconfinement periods, which is why an organization needs a system that can evolve with it.

Genetec ClearID is another proven system that can help organizations manage their physical identity and access rights with ease, allowing them to adjust employee and visitor access rights quickly, remotely, and on a detailed level. Whether it be allowing and restricting employee access to areas of an establishment or facilitating visitors’ experience with self-check-in, ClearID is an adaptable system that can manage an organization’s access rights from any location with an internet connection.

Organizations need to reassess their security practices and implement a change of strategies in order to ensure business continuity while keeping the safety of their employees as a foremost priority through effective physical security solutions.

Artificial Intelligence

How AI is Reinventing Cybersecurity for the Automotive Industry

Published

on

Written by Alain Penel, VP of Middle East, CIS & Turkey at Fortinet (more…)

Continue Reading

Cyber Security

Positive Technologies Study Reveals Successful Cyberattacks Nett 5X Profits

Published

on

Positive Technologies has released a study on the dark web market, analysing prices for illegal cybersecurity services and products, as well as the costs incurred by cybercriminals to carry out attacks. The most expensive type of malware is ransomware, with a median cost of $7,500. Zero-day exploits are particularly valuable, often being sold for millions of dollars. However, the net profit from a successful cyberattack can be five times the cost of organizing it.

Experts estimate that performing a popular phishing attack involving ransomware costs novice cybercriminals at least $20,000. First, hackers rent dedicated servers, subscribe to VPN services, and acquire other tools to build a secure and anonymous IT infrastructure to manage the attack. Attackers also need to acquire the source code of malicious software or subscribe to ready-to-use malware, as well as tools for infiltrating the victim’s system and evading detection by security measures. Moreover, cybercriminals can consult with seasoned experts, purchase access to targeted infrastructures and company data, and escalate privileges within a compromised system. Products and tools are readily available for purchase on the dark web, catering to beginners. The darknet also offers leaked malware along with detailed instructions, making it easier for novice cybercriminals to carry out attacks.

Malware is one of the primary tools in a hacker’s arsenal, with 53% of malware-related ads focused on sales. In 19% of all posts, infostealers designed to steal data are offered. Crypters and code obfuscation tools, used to help attackers hide malware from security tools, are featured in 17% of cases. Additionally, loaders are mentioned in 16% of ads. The median cost of these types of malware stands at $400, $70, and $500, respectively. The most expensive malware is ransomware: its median cost is $7,500, with some offers reaching up to $320,000. Ransomware is primarily distributed through affiliate programs, known as Ransomware-as-a-Service (RaaS), where participants in an attack typically receive 70–90% of the ransom. To become a partner, a criminal must make a contribution of 0.05 Bitcoin (approximately $5,000) and have a solid reputation on the dark web.

Another popular attack tool is exploits: 69% of exploit-related ads focus on sales, with zero-day vulnerability posts accounting for 32% of them. In 31% of cases, the cost of exploits exceeds $20,000 and can reach several million dollars. Access to corporate networks is relatively inexpensive, with 72% of such ads focused on sales, and 62% of them priced at under a thousand dollars. Among cybercriminal services, hacks are the most popular option, accounting for 49% of reports. For example, the price for compromising a personal email account starts at $100, while the cost for a corporate account begins at $200.

Dmitry Streltsov, Threat Analyst at Positive Technologies, says, “On dark web marketplaces, prices are typically determined in one of two ways: either sellers set a fixed price, or auctions are held. Auctions are often used for exclusive items, such as zero-day exploits. The platforms facilitating these deals also generate revenue, often through their own escrow services, which hold the buyer’s funds temporarily until the product or service is confirmed as delivered. On many platforms, these escrow services are managed by either administrators or trusted users with strong reputations. In return, they earn at least 4% of the transaction amount, with the forums setting the rates.”

Considering the cost of tools and services on the dark web, along with the median ransom amount, cybercriminals can achieve a net profit of $100,000–$130,000 from a successful attack—five times the cost of their preparation. For a company, such an incident can result not only in ransom costs but also in massive financial losses due to disrupted business processes. For example, in 2024, due to a ransomware attack, servers of CDK Global were down for two weeks. The company paid cybercriminals $25 million, while the financial losses of dealers due to system downtime exceeded $600 million.

Continue Reading

Expert Speak

What the Bybit Hack Reveals About the Future of Crypto Security

Published

on

Written by Oded Vanunu, Chief Technologist & Head of Product Vulnerability Research at Check Point (more…)

Continue Reading
Advertisement

Follow Us

Trending

Copyright © 2021 Security Review Magazine. Rysha Media LLC. All Rights Reserved.