Security, we can have physical security. A physical presence can act as a deterrence can also help us detect as well detect problems. A security guard, if people, if criminals know a security guard is present, it can deter crime can help detect crime if somebody does break in, can help prevent crime. The security guard might catch the perpetrator before they actually break in or before they managed to commit the crime and can help correct the problem, make sure an unlocked door is locked. For example, guard dogs, another example and guard dogs very similarly fall into different categories. They're detecting deterring, preventing, correcting. We might want to screen our security personnel, we might want general security screening as people enter secure areas, maybe our building. And again, a lot of this is risk based here a government organization, security screening is very common same for military. If you are a small business, it might be less common depending on what business sector you work in. Personnel screening before we employ personnel and during the period of employment we can check things like their criminal records, their background, making sure that they are a good fit for the organization. This commonly occurs with police officers very common to see police officers checked before they are approved for their position, not just for criminal records, but also that they are financially not in a position of debt. Why is this important? Well, if they were in debt, maybe it's possible they might be more susceptible to bribery for example. So the reason I give those examples is just to show that this is very specific to the kind of environment that you're in. Not one size fits all. So we talked a little bit about CCTV two broad types analog or digital analog is the traditional version of CCTV and used to be very expensive. Digital now is commonly IP based, so it's a network based and the price point is very much lower. And it also typically requires less cabling as well. In the image there you can see an old analog system and you can see the cabling going to the system typically has a higher cost of installation and maintenance. When we're talking about cameras, we have different types of sensor as well. We may want to consider lighting to get a good color picture. Usually we need high levels of light once we start to get reduced light maybe on an overcast day or towards dawn or dusk. Then color images become very unclear and they don't that you get very you get almost nothing in darkness. In fact you get close to nothing in darkness. However, there are some sensors that are very good at seeing in low levels of light. These are usually black and white images though, and they are illuminated using an infrared light, not visible to human beings but which the cameras pick up and provide sufficient illumination. So these black and white images can be clearer. A lot of modern digital cameras now are able to see in color during the day and they flip over to infrared lighting, and black and white in low light levels and they can do this automatically. But bear in mind that that we need to make sure we're planning for this appropriately, there shouldn't be a surprise for us. We need to check, we're getting the right type of system. We need this to be part of our specification of requirements. We also want to think about field of vision in fact, sorry, just on low light cameras, if we do need infrared lighting, we can buy infrared led floodlights and these can illuminate large areas externally or internally. Again, very low cost and the light is invisible to human beings. You see you might see a very vague red glow from the LED s but little more than that. Think about field of vision, have you ever seen a crime show or a news report where they ask for help identifying somebody. And the picture they show you is a really grainy black and white picture of somebody very far away, completely unidentifiable or nearly unidentifiable. This is because typically that the planning hasn't been sufficient in terms of the CCTV system as we approach a building, a wide field of vision is appropriate. We want to see who's coming and going and it's helpful to see the body type, the gate, what the person is wearing. But we complement this with cameras that have a much tighter field of vision as people approach the entrances and exits to our building. This way we get a really good head shot a picture of their face as they approach the building as they're coming and going. And when we're buying any of these systems make sure we consider retention and the media type. Most senior managers inherit a decision from a technologist. A technologist makes a decision on retention and media type and buy something. Makes a request to buy something. This should actually be a strategic decision. We're going to keep the footage for how long one month, two months. What do we need? This needs to be needs based, we need to understand what we want to make sure we buy something that's appropriate. The type of media as well, very common to see these as disk based systems. Now if they are disk based systems where are we storing the information, how we're backing it up? How are we protecting it? All common things we would consider and we have another form of physical control, an alarm system most common support for alarm systems now RP, IR sensors, PR. Passive infrared and these look at changes in the temperature of the environment. These are really low cost, the sensors cost roughly $10 US, and they can vary, you can get more expensive, less expensive but there is a really low price point for them. They're very good at detecting movement in effect. We have balanced magnetic switches and these are a pair of devices and they go on things like doors and windows. Something that opens, one side of the sensor contains a magnet. The other side contains a little sliver of metal, when it's close to the magnet, the slither of metal is bent through the magnetic force to either open or close a circuit. So when the window is closed, those two center sensors sitting next to each other completes the circuit and the alarm doesn't sound when the window is opened or the door is opened. That slither of metal is now not being held in place by the magnet anymore. And so the alarm sounds, auditory sensing, listening for sound. These are sensors that listen for sound and you get some very specialized forms of auditory sensors, some that can actually detect the noise associated with glass breaking. We get glass break sensors and with any of these alarm system types, think about how we cope with monitoring and alerts. The reason I say this is bear in mind that you may have experienced some alarm siren type fatigue yourself. Have you ever heard a car alarm sounding in the early hours of the morning or somebody's house alarm? Do you get out of bed, go and look to see you see what's causing the alarm or maybe pull the duvet over your head just because that happens so often. People become like white noise, especially in city environments. So if we are doing this, this alerting a siren, maybe something we want to compliment with an alert that goes either to a security guard or somebody on call. So that they can check cameras or other footage to check whether it's a false positive or whether there really is a security incident. And when we're talking about logging, we want to make a decision of what is being logged, but also how long we're going to keep them for a really good example here is Windows logs. Windows logs are based on size. The more a computer is used, the more quickly they are overwritten. So if I'm asked, do we have logs going back a month for who's logged onto this workstation. My very first question is how many people have logged in but what's the configuration? A good idea is to actually accept again make a decision about retention. We said that with CCTV footage, same is true of other log types. Typically we also want to secure logs and logs become meaningful only when they are reviewed as well. We want to make sure that the logs are reviewed in the diagram there. We see some examples of logs and very similar to what you'd see on a workstation. Somebody has logged in a file has been read an email has been sent. They provide information that may be useful in forensic investigations for example. [MUSIC]
