Role of Physical Security in the Emerging Digital Environment

Role of Physical Security in the Emerging Digital Environment

Since the evolution of the civilization, “Security” has been one of the important agenda for stake holders of the society. Whether it was Vedas, Hammurabi Set of Laws, Manu Smiriti or MagnaCarta; all ancient scriptures and text of all religions across the globe had insight on the issue of security. In any era, resources available with the society were never adequate vis-a-vis population dependent on the resources. Thus securing the assets was one of the important tasks with the caretakers of society, organization, industry or nation, since time immemorial.

In olden days, except knowledge, all other properties were tangible in nature. Thus only physical security was needed and appreciated. But evolution of internet has changed the equilibrium of each and every spectrum of the society; be it family, organization or nation. Use of Computer carved space in our life and resultantly value and importance of intangible properties started increasing. If we take example of Banking industry, large “Hulk” Registers lost their utility and in the longer run, in the process of digitalization got replaced with computer, hard disk, USB & cyber accounting system. These development in gradual process paved way for “Digital Environment”. The Wikipedia.org defines Digital Environment as a simulated “place” made through the use of one or more computers. This place is not in virtual world rather in cyber world. In this era of Digital environment, whatever seems important to us is either in intangible state or able to be classified in intangible state. For example, most of our work and data is on internet, functioning of machine, run of metro, statements of accounts in Bank are dependent upon functioning of some computer programme and relevant information is stored either on computer system or on internet cloud. But even records of Land, which is tangible assets, are in intangible form after digitalization of record. Thus we find ourselves in the middle of a digital revolution, which is changing the way our economy works, our society works and even the physical environment around us.

With passage of time, the concept of security has expanded well beyond its traditional remit and its definition broadened to include information security, risk management, compliance, privacy protection etc. Emphasis has shifted from physical security to Information security which is based upon IT related programme. With the threats, organization and individuals, facing today from all over the world, information security becomes important element of security.

Considering the emergence of Digital Environment and its effect in our life, we will discuss the stature and inter-relation of Information Security and Physical Security per se.

The Wikipedia.org defines the Physical Security as security measures that are designed to deny unauthorized access to facilities, equipment and resources and to protect personnel and property from damage or harm (such as espionage, theft or terrorist attacks). Physical security involves the use of multiple layers of interdependent systems which include CCTV surveillance, security guards, protective barriers, locks, access control, protocols, and many other techniques. The Information security has been defined by the Wikipedia.org as the practice of preventing unauthorized access, use, disclosure, disruption, modification, inspection, recording or destruction of information. Information security's primary focus is the balanced protection of the confidentiality, integrity and availability of data while maintaining a focus on efficient policy implementation, all without hampering organization productivity. This is largely achieved through a multi-step risk management process that identifies assets, threat sources, vulnerabilities, potential impacts, and possible controls, followed by assessment of the effectiveness of the risk management plan.

Information security threats come in many different forms. Some of the most common threats today are software attacks, theft of intellectual property, identity theft, theft of equipment or information, sabotage, and information extortion. Ransomware, Trojan Horses and alike software attacks are known to all. These attacks have left grave scar on the face of various organization and government. At the same time, magnitude of loss caused by these attacks are manifold if compared with the losses caused by physical theft, espionage etc.

            As revealed through basic definition, target area of both securities is similar though operating base and environment is different. But due to aforesaid reasons, physical security has unfortunately been relegated to the realm of secondary concerns in this digital era.

Admittedly, usage of computer system & threats posed to it are on the rise. Thus importance of Information Security is on rise but utility and importance of physical security can’t be overlooked at any cost. If physical security of an organization is breached in present Digital environment, status of loss can’t even be imagined.

Take example of Banking, in earlier times, one can’t even imagine weight of Registers containing Statement of accounts of all customers of the Bank, leave the thought of theft of all records. But now data of same magnitude can be stored in small sophisticated Hard disk which could be removed, transferred from one place to another with blink of eyes. Lack of proper physical security may cause breach into network through physical theft. Again take example of Data Center poorly guarded from physical intrusion and/or fire. Any mishappening may not only stand still the system but place the organization on the knees. Again imagine position of any public dealing office/ Bank Branch not guarded adequately, what sort of chaos could be there? Can role played by security during aftermath of Famous ‘Notebandi’ (Demonetisation) be ignored? Can sense of security enthused by presence of security guard and felt by the Branch Manager while making transactions on Computer Screen in FINACLE facing group of customers be overlooked?

Thus importance of Physical Security can’t be overlooked at any cost in this digital environment. It appears that physical security is overlooked and considered as a second thought in digital environment, as organization focus on technology oriented security to prevent hacking and likewise technological attacks. But it is to be kept in the mind that cyber interruptions, intruders and hacking in the network system is not the only way that sensitive information can be stolen and used against the organization. Physical security is important to ensure that attackers could not gain physical access and take what they want. All the firewalls, cryptography and other security measures would be useless if attackers could not be prevented from physical access to system. Above all, sense of security in the mind of employees working in digital environment is priceless.

Therefore, in my perception, even in this hi-tech Digital Environment, both physical and information security are integrated to each other in such a way that one devoid of other will be of no use. This could be understood though example of famous cartoon character of “Chacha Chaudhary”. Those who are aware with this character must known to the tag line of the character; i.e.; “Chacha Chaudhary’s brain is sharper than a Computer”. He provides solution to most of the problems to the people. But whenever Chacha Chaudhary is under threat, “Sabu” (another important character of the Cartoon Series whose physical strength provide support base to the Chacha) comes in rescue of Chacha. Sabu not only save Chacha Chaudhary from danger but also stands as deterrent for evil characters of the comic series.

In this digital environment, “Information Security” may be treated as “Chacha Chaudhary” and “Physical Security” as “Sabu”. Only strong cohesive combination of both can provide desired strength to round-the-corner security of an organization. At the same time, it should be remembered that “Sabu” can survive without help of “Chacha Chaudhary” but “Chacha Chaudhary” can’t function effectively without considerable support from “Sabu”.

            Lastly, role and importance of Physical security is not going to diminish in any environment if security of the environment and related elements are at stake. Physical Security is having and shall have paramount significance whenever question of “Security” will surface before the society, organization as well as nation.