A vital part of a business's annual cost is protecting its assets.
Protecting Intellectual property is a major part of this cost but many operations overlook an equally intrinsic part of their business – data center security.
According to Info Security magazine, many companies have two different operations for their assets and that increases the coordinating problems and the bottom line.
David Orischak of Digitus Biometrics in Savannah, Georgia, has identified this problem and his company has designed a biometric product that helps streamline the information and physical security disciplines for companies who are operating under two or more security systems. Orischak points out that many companies don't understand the internal risks they face on a day-to-day basis. "Current physical security methods don't mesh well with actual data center security needs designed to slow intruders from the outside. Most attacks come from inside, so trusted vendors and employees present the largest risks – people who already have authorized access to the facility." Digitus's product allows companies to have access control of their physical plant as well as their intellectual properties.
Having a single, smart-card system to authenticate personnel may not be the best bet. According to an article at Securingjava.com, issues at the terminal and altering of the card itself are two major problems that have yet to be rectified. Orischak adds that managers need to look at other, more secure technology to protect their data centers from internal malfeasance." In the data center security market today, given the value of stolen records – which is at an all time high – we have put a real monetary value on the information that resides in data centers, and those with malicious intent will attack the centers that are most vulnerable – the ones with lower levels of physical security." Server cabinets have been targeted and that can cause a lot of downtime for compromised operations while IT teams bring them into security compliance.
Orischak and other industry developers believe that fingerprint scanners are the answer. An employee scans his or her fingerprint at the time of hire and that print is stored into the security system. This allows the company to know and control who has access to the physical plant at all times and really can't be tampered with in any major way.