As an independent insurance business, you’re on the hook to implement a cybersecurity program. Unfortunately, the laws and regulations in place don’t provide much guidance on the actual, real-life controls that are required as part of said cybersecurity program.
A cybersecurity program is made up of three types of controls: physical, technical and administrative. We’ll break each of those down and provide some guidance to make sure your bases are covered on all three fronts. Today, let’s discuss physical controls.
Physical controls are probably the most obvious and easiest controls to handle. When we talk about physical controls, we’re talking about things like locked doors, alarm systems, video surveillance systems, and smart locks. Make no mistake, physical security is an important aspect of cybersecurity.
We’re going to assume you already lock your doors (yikes if you don’t) but below, will list a few easy-to-use and cost-effective options to make sure your physical perimeter is protected.
- Alarm Systems. Alarm systems are a great way to deter bad actors. Not only are alarms a notification system when an incident occurs, but they’re effective deterrents as well. Alarms don’t have to be hard wired or expensive. You might consider a solution like SimpliSafe as an easy-to-install, cost-effective solution. It’s customizable for the size of your building and you can take it with you if you move offices.
- Smart Locks. Smart locks can mean a variety of things. Most often, we see businesses using keypads or key cards for entry. Both require a unique identifier (a code or card) to gain access. Additionally, most smart locks today include an audit trail – when someone enters, the lock records that entry. In the event of a break in or unauthorized access, you can check this record and find out whose code was used. These solutions can get expensive but we like the Schlage Encode as a good option, especially for smaller offices.
- Video Surveillance. Cameras are not only a deterrent but like smart locks, they’re helpful in the investigation of an incident. SimpliSafe (linked in first bullet) offers easy-to-install camera options that seamlessly integrate with their alarm systems, but there are dozens of options available.
Physical security doesn’t have to be complicated. It just has to be effective. While not exhaustive, this list should be a good starting point. Check back soon for Part 2 of this series where we’ll break down technical controls.