{"id":5018,"date":"2020-09-06T20:29:19","date_gmt":"2020-09-06T18:29:19","guid":{"rendered":"https:\/\/tekmart.co.za\/t-blog\/?p=5018"},"modified":"2020-09-06T20:29:20","modified_gmt":"2020-09-06T18:29:20","slug":"getting-physical-with-datacentre-security","status":"publish","type":"post","link":"https:\/\/tekmart.co.za\/t-blog\/getting-physical-with-datacentre-security\/","title":{"rendered":"Getting physical with datacentre security"},"content":{"rendered":"Reading Time-approximately:<\/span> 6<\/span> minutes<\/span><\/span>\n

Whether it is natural disasters, terrorism or break-ins, datacentres will be vulnerable to a range of risks unless they are physically secured. Here\u2019s how you can improve the physical security of your datacentre.<\/strong><\/h2>\n\n\n\n
\"Nicholas<\/figure>\n\n\n\n

By Nicholas Fearn<\/a><\/p>\n\n\n\n

Published: 24 Aug 2020<\/strong><\/p>\n\n\n\n

Hackers can wreak all sorts of havoc by breaching\u00a0datacentres, from gaining access to masses of sensitive data to knocking entire companies offline.<\/p>\n\n\n\n

With\u00a0cyber attacks\u00a0becoming more common and complex, it\u2019s understandable why datacentre operators are worried \u2013 and increasing their cyber security spend as a result.<\/p>\n\n\n\n

But the physical security of datacentres, which some experts fear is being neglected as operators focus more of their time and resources mitigating\u00a0cyber risks, also has a crucial role to play. Whether it\u2019s ensuring datacentres are equipped\u00a0to cope with natural disasters\u00a0or keeping intruders out, physical security is key to maintaining the resilience and effectiveness of datacentres.<\/p>\n\n\n\n

Jake Moore, a security specialist at\u00a0ESET, says: \u201cPhysical security is just as important as cyber security but it rarely gets matched with the same pay. Some of the biggest threats come from physical access to a network, such as\u00a0insider threat, which can be extremely difficult to protect against.\u201d<\/p>\n\n\n\n

Moore takes the view that physical security should be treated just as seriously as cyber security when it comes to securing datacentres. He warns that businesses end up exposing themselves to a range of risks if this area of security is ignored.<\/p>\n\n\n\n

\u201cAccess management is clearly a big issue, too, with the likes of\u00a0the recent Twitter hack, and mustn\u2019t be forgotten about when securing a perimeter,\u201d he says. \u201cCoupled up with\u00a0social engineering, it can have devastating consequences.<\/p>

\u201cFurthermore, the recent influx of\u00a0ransomware demands\u00a0are being paid due to the incorrect way backups are being kept. When stored correctly, it can mitigate ransomware mishaps and get businesses back up and running in a short time.\u201d<\/p><\/blockquote>\n\n\n\n

A balancing act<\/h3>\n\n\n\n

In many ways, cyber and physical security go hand-in-hand. And if one area is missing, the other will not be as effective. \u201cThose in charge of the\u00a0network perimeter\u00a0mustn\u2019t get complacent when spending on physical security and need to remember that spending resources on cyber security can be worthless without protecting the physical assets, too,\u201d says\u00a0Moore.<\/p>\n\n\n\n

\u201cThis can be showcased in arranging a simulation attack from\u00a0a third-party penetration team\u00a0and it can be extremely valuable to a company. Such an experiment will usually highlight those weaknesses both in the network and from a physical perspective, and all in a safe environment.\u201d<\/p><\/blockquote>\n\n\n\n

Andy Miller, security risk manager at\u00a0BT, agrees that the physical security of datacentres must be treated with the same level of attention as cyber threats.<\/p>\n\n\n\n

He tells Computer Weekly: \u201cThe foundation of protecting datacentre assets is to ensure you truly understand how critical each of your assets are, and the associated risks to service operations if they are compromised. When it comes to understanding and then mitigating risk,\u00a0you must think holistically\u00a0and ensure that you aren\u2019t forgetting to address the physical aspects.<\/p>\n\n\n\n

\u201cThis includes employee\u00a0identity and access management\u00a0to avoid unauthorised access; considering the effects of disruption from power or utilities issues; how you would deal with\u00a0environmental causes\u00a0such as flooding; and even more extreme situations such as explosives,\u00a0electromagnetic pulse\u00a0(EMP) attacks or a hostile vehicle incident.\u201d<\/p>\n\n\n\n

For datacentre security measures to be effective, organisations should take into account all types of threats and mitigate them accordingly.<\/p>\n\n\n\n

\u201cEssentially, you must think about what\u2019s beyond your perimeter, as well as your own systems and operations (cyber and physical), all the way to the rack,\u201d says\u00a0Miller. \u201cBy adopting a\u00a0security-by-design\u00a0approach, you can invest intelligently to create defence in depth, delivering the comprehensive range of protections required to deal with physical threats, alongside the cyber threats which are often top of mind.\u201d<\/p><\/blockquote>\n\n\n\n

Read more about datacentre security<\/h4>\n\n\n\n