Checklist for convergence

zoom

zoom

Beth Thomas, Honeywell, discusses the benefits behind convergence.

In the past few years, perhaps no security industry buzzword has been defined in articles and promotional materials as many times as convergence.

These definitions have most commonly referred to the integration of physical security and IT systems, with occasional elements of building control. These definitions, while helpful to end users, beg the ultimate question: How do I make it work?

Convergence uses data generated by both physical security and IT systems to drive both business process efficiency and security, and its framework defines a migration path for organisational growth. Here are some basic elements required to ensure a solution is truly converged.

Common security policy management and control

The IT infrastructure is the backbone of a converged solution, sharing knowledge of key business data across systems. The physical security system does not inherently know critical business data such as employee status, staffer security clearances and training certifications.

A computerised HR system, though, often has this knowledge. IP-enabled security systems therefore allow users to take advantage of fixed investments and improve return on investment (ROI).

Developing common protocols for managing access to company assets and data enables more efficient provisioning and management.

An organisation develops role-based policies that can manage badge issuance, enrollment and revocation processes by leveraging XML/SOAP interfaces for integration with identity management solutions.

The key benefit is that building security personnel continue to use tools best suited to their jobs and HR personnel continue using HR tools.

Organisations should identify:

• Authoritative sources (the system that has the ultimate say) for each person who has a building badge or an IT account;

• Sources (IT systems or people) of key data used to determine whether a person has permissions to use a resource or access an area;

• Compliance or audit needs where the data exists on multiple systems;

• Any business or security concerns that are unique or are especially important to an organisation;

• Key business processes (onboarding, offboarding, change of position) and determine the responsibilities of different systems;

• A policy platform that supports customisable workflow creation tools to easily model processes and approvals.

Print | Email | Discuss this article |

USER COMMENTS (0 COMMENTS)

POST A COMMENT

CLICK HERE TO POST A COMMENT

Add your Comment All posts are sent to the administrator for review and are published only after approval. ArabianBusiness.com reserves the right to remove any comment at any time for any reason. Please keep your responses appropriate and on topic.
Name *
Remember me on this computer
Email *	(Your email address will not be published)
City
Country
Subject *
Comment *
Notify me of further comments
Security Code *
Please click post only once - your comment will not be published immediately.