William Brown

Johnson Controls has announced that its VideoEdge network video recording platform from American Dynamics is the first product to be officially certified as meeting the highest level of third-party cybersecurity standards from UL (Underwriters Laboratories) for Life Safety and Security, UL2900-2-3. UL’s Cybersecurity Assurance Program (UL CAP) tests network-connectable products and systems against established criteria from the UL 2900 series of cybersecurity standards. The UL CAP program also assesses a manufacturer’s processes for cybersecure product development, incident response and internal ongoing testing and evaluation of security vulnerabilities of products. The development of standardised, testable cybersecurity criteria by UL provides a level playing field for end users and systems designers" Meeting robust cybersecurity standards To garner the Level 3 certification the highest UL CAP designation, the VideoEdge NVR platform underwent a series of evaluations based on UL 2900-2-3, a standard developed specifically for the electronic physical security industry, which assesses a product’s software vulnerabilities and weaknesses and reviews its exposure to exploitation and known malware. “The development of standardised, testable cybersecurity criteria by an organisation such as UL, the preeminent security and life safety certification organisation, provides a level playing field for end users and systems designers, who can now trust that a UL CAP certified product meets robust cybersecurity standards,” said William Brown, senior engineering manager, Cyber Protection Program, Building Technologies & Solutions, Johnson Controls. The product submitted by Johnson Controls meets science-backed third party industry best practices for cybersecurity"High degree of security and reliability “We’re extremely proud of this first UL CAP certification, as it encapsulates the ethos of our Tyco, Cyber Protection Product Security Program and our product engineering, development and support culture, which is to provide our customers with solutions designed to meet a high degree of security and reliability and provide a positive operational impact. “Submitting the VideoEdge NVR platform for UL CAP assessment and certification demonstrates Johnson Controls’ commitment to supporting their customers and end users,” said Ken Modeste, director of UL’s Connected Technologies business. “The product submitted by Johnson Controls meets science-backed third party industry best practices for cybersecurity, and thus provides them a higher level of trust and confidence.” Cyber Protection Product Security Program The powerful VideoEdge NVR platform was developed under the Tyco, Cyber Protection Product Security Program, which combines secure product development, testing and evaluation, and configuration guidelines for compliance. The Cyber Protection Product Security Program approach begins with product design and continues once a product is in the field, a recognition that a product considered secure today may not be secure tomorrow. Through the rapid incident response service, the dedicated cybersecurity team quickly assesses new threats and vulnerabilities and advises customers on how they may reduce their cybersecurity exposure.

Tyco's exhibit will highlight integrated cyber-secure management platforms and solutions Tyco Security Products returns to ISC West in Las Vegas between April 5th-7th in Booth 20005. The exhibit will highlight the integrated cyber-secure management platforms and solutions ranging from complex enterprise environments to smart, active households. These solutions provide end users with actionable intelligence and deep operational benefits far beyond traditional core security functions, allowing a comprehensive view of their operations. Robust management platforms and deep integrations “The ability to effectively analyse massive amounts of data collected from a myriad of systems found in a building into useful and comprehensive information coupled with reporting and business insights are powerful tools for decision-makers in driving efficiencies and managing risk,” said Anita Santos, Vice President of Marketing for Tyco Security Products. “Our robust management platforms and deep integrations provide our customers with the intelligence to improve security and safety but also extends far beyond that by influencing the economic and operational impact of their buildings as well.” A major highlight of ISC West 2017 is the innovative Software House iStar Ultra Video; A hand-sized solution with embedded video recording and management in a single appliance. An award candidate in the 2017 SIA New Product Showcase for innovative technology, iStar Ultra Video offers highly distributed, small site security with enterprise scalability with remote management capabilities. iStar Ultra Video offers highly distributed, small site security with enterprise scalability with remote management capabilities Also from Software House, C•CURE 9000 Visitor Management in v2.60 features a new self-service Kiosk Application which allows a visitor to look up an appointment, check in and automatically generate and assign a temporary credential with notification to the host. The latest release of C•CURE 9000 v2.60 features customisable access control workflows for efficient management of access credential requests. Complete Security Solutions Headlining the ISC West 2017 booth is the Complete Security Solution; an all-in-one solution with integrated Kantech access control, Exacq video surveillance, and DSC intrusion detection. The Complete Security Solution is the exemplification of the strength of the integrations within Tyco Security Products’ portfolio. It allows end users to manage all aspects of on-premises physical security from a single easy-to-use interface with feature-rich remote and mobile management capabilities. End users can arm and disarm the system from either the Kantech EntraPass access control user interface or the exacqVision VMS and view partition/zone status and receive push notifications for triggered alarms via 24/7 mobile apps. The DSC iotega is an innovative security and lifestyle management platform, which is supported by Tyco Security Product’s trusted, full-featured security technology and facilitates home automation enhancements and add-ons via software apps. iotega offers customers the flexibility to create the security and home automation solution that works for them. It also features robust and proven PowerG wireless technology along with 2-way voice and visual verification. With easy plug and play installation, iotega’s first integrated solution is powered by the SecureNet interactive platform and supports numerous Z-Wave devices, smart switches and plugs, thermostats, door locks and a wide range of other home automation devices. Other product releases presented at the show A transformed victor GUI for American Dynamics victor VMS and VideoEdge NVR 5.0 with enhanced Intelligent Tracking, Perimeter Protection, and License Plate Recognition (ANPR) analytics.  In addition, the latest release introduces TrickleStor, a feature that allows video recorded in Illustra IP cameras’ SD cards to trickle back to the VideoEdge NVR in the event of an outage to provide cost-effective video redundancy. The latest version of Kantech's EntraPass Security Software, EntraPass v7.1, features the EntraPass Go Pass mobile application that allows card holders to use their iOS mobile devices as an access control credential. Using the EntraPass Go Pass mobile app, cardholders can gain access to doors simply by pressing the appropriate icon of the door in the app, as they approach the door or from anywhere in the world. The EntraPass Go Install app for installers is now available for Android users. Tyco Security Products is also pleased to present a session on cyber-secure platforms as part of ISC WEST’s educational track  Exacq has added critical cybersecurity features demanded by IT departments in its version 8.4 of exacqVision. The VMS supports HTTPS to encrypt the communication between supported cameras and the NVR, and users can now easily configure security certificates used by exacqVision Web Services for HTTPS communication. The Illustra Flex 2MP PTZ has 20x optical zoom with continuous auto-focus plus 10X digital zoom, providing very effective video surveillance over long distances. The new Illustra Pro 12MP Fisheye provides high quality 360° or 180° panoramic video with ultra-smooth ePTZ movements and onboard dewarping technology for distortion-corrected video streaming. Innometriks high-assurance solutions for mission critical applications including hostile outdoor environments, help customers meet the credential verification and identity authentication requirements set forth by the U.S. Government. With an open platform approach, Innometriks solutions integrate seamlessly with industry-leading PACS, including Software House C•CURE 9000. OpSec, Meet InfoSec Tyco Security Products is also pleased to present a session on cyber-secure platforms as part of ISC WEST’s educational track. “OpSec, Meet InfoSec”, presented by William Brown, Sr. Engineering Manager, Regulatory and Product Security, for Tyco Security Products, will be held on Thursday April 6th, 10–11 a.m. in Room 309 and will focus on practical steps for integrators to garner an IT security buy-in for a customer project. For more information on the Tyco Security Products full portfolio and ISC West events, please visit Booth 20005.

ISC West was hopping on its first day, with crowded aisles, packed booths and plenty of news to share. Much of the news consists of product announcements resulting from the rapid pace of technology development in the physical security market. It was enough to cause sensory overload. Educating integrators and end users about security technology Technology is moving so fast that it’s understandable integrators, not to mention end users, might struggle to digest it all and apply it to their security needs. Minu Youngkin of Allegion suggests that the pace of new technology introductions, as exemplified at ISC West, is a factor compelling a shift toward a broader conversation in the industry. “We want to be more about the message, what’s important to an integrator,” says Youngkin, who handles integrator marketing for the lock manufacturer. “We can’t just be a lock company anymore; we have to be a step above, not just talk about the product, but about the technology, and where it’s going. We align our products to software products, various credentials, and work with the right partners. We’re an important ingredient, but there are others on board, too.” The manufacturer is increasingly fulfilling a need in the market to provide education about technology. On the product side, Allegion is promoting its Engage wireless lock technology designed to be easy to install, connect, manage and use. Axis targeting small business sector Axis kicked off the first day of ISC West with a press conference before the show floor even opened. Axis introduced a new line of cameras targeting the small business sector, called the Companion line, promising “everything you need for small business.” Noting that smaller systems are a large part of the market (and one Axis has not historically targeted), the new camera line is aimed at serving small business needs such as limited or no knowledge of systems, only sporadic use, and cash constraints. Axis introduced a new line ofcameras targeting the smallbusiness sector, called theCompanion line, promising“everything you need forsmall business” The new line includes some (but not all) of the features of Axis higher-end cameras, such as full HD resolution and Zipstream compression to minimise storage needs. However, the cameras are priced more competitively (translate: less expensive) to appeal to smaller users. Although the new line includes a small dome camera priced at $169, Fredrik Nilsson, Vice President, Americas, Axis Communications, says the company is not seeking to be the least expensive.  “We will never compete based on price,” he says. “But we need to get close enough to [low-cost competitors] and then sell the Axis quality. We need to convince them to spend a little more for a better solution.” Ironically, and probably not coincidentally, lower-priced camera manufacturers, notably Hikvision, are investing heavily in cracking the enterprise market at the same time Axis is looking to create more presence at the lower end. In addition to pricing, the new Axis line includes simplified system design and implementation with components such as an 8-channel recorder for $499 and a 4-port PoE switch for $79. But Axis also introduced new cameras for its medium-sized and even enterprise customers, including a new 360-degree multi-sensor network camera. Also, the Axis Perimeter Defender is a scalable and flexible video analytics application for intrusion detection in the enterprise market. It is based on technology from Digital Barriers, a company with extensive experience in surveillance analytics. Low bandwidth options Zipstream is now a feature on the entire Axis camera line, helping to avoid bandwidth peaks and minimising storage needs, even for PTZ cameras. Zipstream can adjust to PTZ camera movements in real-time, offering even further storage and bandwidth savings and eliminating bitrate spikes. Other companies are also offering lower-bandwidth options. Panasonic’s Smart Coding system, for example, promises to substantially decrease bandwidth usage and picture noise -- they claim up to 75 percent reduction. At ISC West, Panasonic is also introducing the AeroPTZ camera, a high-performance PTZ for extreme environments. The high-durability fiberglass body resists salt-air corrosion, and image stabilisation eliminates shaking from cameras mounted on tall poles. Avigilon, another video company, is introducing the new H4 Edge Solution camera line, which includes video recorder functionality and analytics in an all-in-one edge solution. The camera records video directly to an onboard solid-state drive, thus eliminating the need for a separate network video recorder and lowering installation and systems costs. Bosch Starlight cameras deliver high quality colour video surveillance in extremely low light conditions. They’ll take your photo inside a room at their ISC West booth, first with the lights on and then in the dark. Bosch is also now offering video analytics at the edge as a standard, rather than an optional feature. Hot topic of cybersecurity Cybersecurity is a big topic here. For instance, Panasonic is highlighting its use of embedded Symantec technology to protect camera streams and ensure data integrity. Cybersecurity is not an“end-game,” but rather aconstant process thatrequires vigilance Also directing a strong focus on cybersecurity at ISC West is Tyco Security Products, which is implementing some of the cybersecurity measures developed in its government business sector to apply to its broader range of products and vertical markets. In the government market, standards such as FISMA (U.S. Federal Information Security Management Act) and the NIST cybersecurity framework specify the required cybersecurity protections. Tyco is now applying the benefit of its compliance with those standards to its systems in other verticals using a six-part holistic approach. They call it the Cyber Protection Program. “It’s all about risk management,” says William Brown, Tyco’s Senior Engineering Manager, Regulatory and Product Security. “You don’t have to install and use all the security features; you can choose your level of risk and the features that your IT department can support.” Optional features include single sign-in using an Active Directory. Brown says physical security has been too focused on hardening each individual component while overlooking the need for a more comprehensive approach, including how to install products securely and how to respond to vulnerabilities. Tyco hopes to partner with integrators to help them understand how to meet cybersecurity needs. “Physical security is still new to cybersecurity, and it’s a constant evolution,” Brown comments. He says cybersecurity is not an “end-game,” but rather a constant process that requires vigilance. Cyber-physical security A new entrant focused on cybersecurity is Wurldtech, a GE division that addresses cybersecurity challenges of operational assets such as various types of computer-driven machines, focusing on vertical markets such as power, healthcare, transportation, and oil and gas. Cybersecurity of operational assets also includes ensuring cybersecurity of video and access control systems, for example, which can be an entry point for malware into an enterprise IT system (since they are often connected). According to Wurldtech, different tools are used to protect operational technology (OT) assets as opposed to IT assets. Wurldtech’s major goal at ISC West is education. The company offers a hardware “box” to address the problems, and also has a range of services on broad issues of cybersecurity, such as assessment and evaluation of people, processes and technology. Wurldtech calls the protection of operational assets “cyber-physical security,” a term I heard today for the first time.

Tyco's Complete Security System brings video, intrusion and access control to one, single interface Tyco Security Products is excited to announce a full slate of new product and solution offerings for this year’s ISC West show, beginning tomorrow, April 6. Highlights include the new Complete Security System which brings together access and manage video, intrusion and access control from one, single interface, enabled by the native integrations between the Kantech, exacq and DSC brands. Convergence of physical and cyber security In addition to a host of product introductions, Tyco Security Products cyber security expert William Brown will be speaking Wednesday, April 06, 2016: 11:15 AM – 12:15 PM in Room 302 on The Convergence of Physical and Cyber Security: Recognising the Readiness of IP-based Systems, an overview of the four levels of physical security threats beyond perimeter, boundary and volumetric security, and present best practices to ensure cyber security readiness. Tyco Cyber Security Program In addition, the Cyber Security Program, a multifaceted programme that offers a holistic approach to cyber security awareness for physical security through each phase of the product development life cycle will also be formally announced tomorrow at ISC West. And finally, the hattrix Five Diamond Program Launch event begins at 3:30pm on Thursday, April 7 in The Sands Expo Center’s San Polo Room, 3401. Attendees of the free event can learn more about the hattrix Five Diamond Program and its data center alliance, which provides the highest level of data security in the market for cloud-based access control systems.