Issue link: https://www.e-digitaleditions.com/i/1255991
42 I ICT TODAY of access to individual cabinets, the IT team could review security video footage and annotate dates and times or assign escorts and keep manual records, then generate reports of access from those records. Electronic locking and access control systems auto- mate the logging of access at the cabinet level and enable automated reporting by user or cabinet. This speeds preparation for an audit and helps narrow the scope of event investigations. 4. Event Response When a data breach occurs, immediate event response is critical. With a keyed lock system, IT must manually check the condition of doors and locks. If a key is lost or stolen, they must rekey the lock. Reporting requires manual collection, review and preparation of records. Electronic locking and access control systems simplify, shorten and, in some cases, automate these responses (Figure 4). The IT department can quickly disable a credential or reprogram locks, and it can be proactively notified if a door is left opened or unlatched (unlocked). 5. Jurisdiction: IT or Facilities Management? In most data center facilities, security is deployed via a building management system platform, owned and managed by facilities management. However, when it comes to data center cabinets and systems, security is most often controlled by IT, given it is the IT depart- ment that oversees data protection and the controls applications that reside in the equipment. It would be wise for IT managers to obtain an understanding of the building management system and the ICT connectivity infrastructure supporting it. Likewise, it behooves facili- ties management to understand better the responsibilities and functions of IT for a unified team approach. FIGURE 4: Remote visualization and control of the status of the cabinet doors help IT and cybersecurity teams to be aware of any access attempt, and then take the necessary proactive measures to remain compliant with privacy regulations. Electronic lock and access control systems automate monitoring, documenting, and control of access and allow fast reprogramming if access rights change or if a credential is lost or stolen. Keyed locks provide limited rights management. Typi- cally, all cabinets are keyed alike. It is possible to use com- bination locks or have groups of cabinets keyed differ- ently to limit access for cabinets to groups or individual users, but this requires a strong system for documenting assigned combinations for key management. In contrast, electronic locking can be reprogrammed quickly with new access codes, and no hardware modifi- cation is required. With electronic locking, it is possible to assign individual users and individual cabinet access rights. Each user can have different and specific access rights. The setup of rights in the software is simultane- ously documenting the assigned access codes (keys). 3. Logging Reports and Auditing Having users sign in at a controlled front building access documents the person's presence in the building but not their access to individual cabinets. To create a report