Wednesday, October 26, 2016

Temple Student Uses Target Gift Card to Get Past Security in 9 Buildings -- Security Today

Photo ID's are valid for small faculties that everyone knows each other and a stranger stands out. But even if the guards are watching carefully, picture ID's are easy to make and alter. Either give the guards watch lists of active cards, time consuming and hard to maintain, or go to an access control system that allows folks to either swipe in or let a guard swipe in, the guard is actually better because they then have to see the card and the person, if not stolen or lost cards can be used to enter. If you do go to just access controlled doors then you may want to add a PIN number to the card, so the user would have to know the PIN and have the card, this should be used on at least the outer doors to facilities and then it maybe acceptable to use just the card on inner doors. PIN's can be guessed or coerced, so if the level of security is that serious, consideration should be give to a bio metric system like a fingerprint instead of a PIN. In some very critical areas it is sometime prudent to require all three, the card, the PIN, and the bio metric, but this is normally only for very high security area. Each level of security can be helpful, and perhaps needed, but every system can be beat. Every bio metric system I know of has been beaten in the past, to include finger prints, to eye scanning, even facial recognition, so there is no silver bullet out there but each gives you a level of security over the other. One computer facility I work with has 3 bio metrics a person has to use to enter, and are considering adding a fourth. For campus security it maybe acceptable to use only a card, but just remember the vulnerability of stolen or altered ID's, which can lead to liability. It normally comes down to a cost issue, but cost issues do not stand up all that well in civil court cases after someone is hurt. But it still comes down to cost, and remember every system can be beat. The rule of thumb is what are other campuses in the area using, and then at least match that level of security.
from CTI Consulting

No comments:

Post a Comment