Should an IT staff be concerned with a network's physical security?

Should an IT staff be concerned with a network's physical security?

How concerned should IT people be with the physical security of their networks? Fifty feet outside of an office building, for example, may be a manhole that contains all the fiber that connects you to the outside world. Should those kinds of considerations be part of my network security plan?

    Requires Free Membership to View

    SearchSecurity.com members gain immediate and unlimited access to breaking industry news, virus alerts, new hacker threats, highly focused security newsletters, and more -- all at no cost. Join me on SearchSecurity.com today!

    Michael S. Mimoso, Editorial Director

    By submitting your registration information to SearchSecurity.com you agree to receive email communications from TechTarget and TechTarget partners. We encourage you to read our Privacy Policy which contains important disclosures about how we collect and use your registration and other information. If you reside outside of the United States, by submitting this registration information you consent to having your personal data transferred to and processed in the United States. Your use of SearchSecurity.com is governed by our Terms of Use. You may contact us at webmaster@TechTarget.com.

It's interesting that you ask this question. It's one that a consulting client asked me just a few days ago. The company's office building is located in a major metropolitan area, and it shares the space with numerous other tenants. Its offices are on one floor, and its data center is located several floors away. My client was concerned that an eavesdropper might be able to tap the fiber optic connection between the two floors.

My advice to them? Don't obsess about it. There are some cases where you should be concerned about the physical security of your network, but at some point you're either going to have to trust an outside provider or run a cable through a secure area. In the case of this particular client, the risk seemed acceptable.

In the scenario you describe, an outside manhole shouldn't be a great concern. Once the traffic leaves your private network and enters the public Internet (which is of course where it goes once it leaves your building), none of the sensitive data should be sent without using encryption. Proper data encryption mitigates the risk of interception. There's no difference between someone climbing down a manhole and tapping your external connection and an eavesdropping hacker that compromises an intermediate router somewhere on the Internet.

More information:

  • Dan Sullivan reviews some of today's biggest physical security threats.
  • Integrating physical and logical security can bring many benefits to the enterprise, but a successful union isn't easy. .
  • This was first published in December 2007

    Join the conversationComment

    Share
    Comments

      Results

      Contribute to the conversation

      All fields are required. Comments will appear at the bottom of the article.