In a cloud-driven world, physical security might seem less critical, but is it really? When we think of cyber security, we often focus on complex firewalls, encryption, and software defences. However, physical security threats, like someone breaking into your office to access servers or steal data, are also part of the equation. So should we shift our focus to physical security as our top priority?

Context is key: Understanding the threat landscape

In today's digital age, the risk of someone physically breaking into your office to access sensitive information is significantly lower compared to the very real and prevalent threats of remote cyber-attacks. This is because remote attacks can be executed from anywhere in the world, targeting your systems and people over the internet with no physical presence required. The convenience and anonymity of these remote attacks make them the preferred method for cyber criminals.

Real-world examples of remote threats

Take, for example, the notorious WannaCry ransomware attack in 2017, which compromised of hundreds of thousands of computers across 150 countries. The attackers never needed to set foot in any of the affected offices; they exploited vulnerabilities in outdated software remotely. Similarly, phishing attacks, where malicious actors trick individuals into revealing sensitive information, are an everyday occurrence and can be orchestrated virtually anywhere.

Remote cyber threat defences

Given the remote nature of most cyber threats, it makes sense to focus resources and defences to protect against these attacks. This can be achieved by implementing essential measures such as robust firewalls, regularly updating software, and educating employees about the risks of phishing. These defences are not only more pertinent, but also more effective in safeguarding your business from the majority of cyber threats.

Addressing physical security concerns

While remote threats should take priority, it is still crucial to implement appropriate physical security measures to safeguard your office. These measures should be practical and aligned with the scale of your operations. Here are five recommended measures to enhance your physical security:

1. Device encryption: A simple yet essential feature that should be enabled by default. It safeguards the data on your device’s storage drive, ensuring it remains inaccessible if the device is stolen.
2. Remote wipe: A widely available and essential feature that lets you remotely erase data from your phone or tablet if it’s ever stolen.
3. Device authentication: Implement authentication protocols like 802. 1x to ensure that only known authorised devices can physically or wirelessly connect to your network. This adds a layer of security by verifying each device before granting access.
4. Controlled access: Use keycard systems or biometric scanners to restrict access to sensitive areas within your office. This helps prevent unauthorised individuals from physically accessing critical systems.
5. Secure storage: Store sensitive documents and backup drives in locked cabinets or safes. This reduces the risk of physical theft or tampering with important data.

Finding the right balance

While physical security should not be neglected, it is common for resources and budget to prioritise protection against remote cyber threats, which are more prevalent and pose a greater risk to your business. By strengthening your remote defences and maintaining a balanced approach to physical security, you can create a comprehensive security strategy that effectively addresses the most significant risks.