Cybersecurity Starts at the Physical Layer

Ransomware attacks increased threefold over the past year, according to a May 2021 estimate by the U.S. Department of Homeland Security.

Considered the most dangerous type of cyberattack, ransomware is not just a weapon that secretive individuals and organizations use when they penetrate the virtual perimeter of computer networks.

In fact, most cyberattacks happen from within by people who have physical access to computer systems.

Exploiting the weakest links

All supply chains have locations, such as warehouses or terminals at ports and rail yards, where employees and contractors interact with proprietary and third-party systems. Any locations that are under-supervised and lack current Privileged Access Management (PAM) technology are more susceptible to cyberattacks.

At these exchange points in supply chains, workers often use outdated computers, tablets and handhelds with software that has not received security updates for years.

Cyberattacks, whether they come from without or within, have long-lasting consequences for victims. Many companies never recover, and disruptions spread like wildfire through supply chains and impact commerce on a large scale.

Employees and contractors with physical access to computer systems and networks can exploit weaknesses to accomplish their designs. Hackers may also try to steal their identities and security credentials to access sensitive data and introduce malicious code.

Checking for the right credentials

While evaluating PAM technologies that can prevent intrusions at both the physical and virtual level of supply chains, organizations should also begin looking for systems that meet strict security guidelines.

One of the most important security guidelines is SOC 2. This voluntary compliance standard, developed by the American Institute of CPAs (AICPA), specifies how service organizations should manage customer data.

The standard is complementary to the ISO 27001 framework for information security management.

Suppliers that obtain the SOC 2 certification, as NASCENT Technology has, must go to great lengths to ensure their systems protect customer data against numerous physical and virtual cyber risks. More importantly, suppliers with the certifications must continually update and follow guidelines to ensure their systems are up to date.

As one of the largest manufacturers of Automated Gate Systems (AGS) and kiosks, NASCENT has obtained certifications for its products that integrate with third-party cameras, sensors and connected technologies for an end-to-end tracking, monitoring and verification platform.