Toshiba CCTV Storage System / HDD

The transition to remote working has been a revelation for many traditional office staff, yet concerns over data security risks are rising. Mark Harper of HSM explains why businesses and their remote workers must remain vigilant when it comes to physical document security in homes. Pre-pandemic, home offices were often that neglected room in people’s homes. But now things are different. After the initial lockdown in 2020, 46.6% of UK workers did some work at home with 86% of those doing so because of the pandemic. Semi-permanent workspaces Since then, many have found that over time, those semi-permanent workspaces have become slightly more permanent – with official hybrid working coming into effect for an assortment of businesses and their teams. The adoption of hybrid working can in fact be seen as one of the few positives to come from the pandemic, with less travel, more freedom and higher productivity top of the benefits list for businesses and their employees. The handling of sensitive documents, is a growing concern for office managers But those welcomed benefits don’t tell the whole story. The transition to remote working has undoubtedly impacted workplace security, with various touch points at risk. The handling of sensitive documents for example, is a growing concern for office managers. In simpler times, sensitive data was more or less contained in an office space, but with millions of home setups to now think about, how can businesses and their office managers control the issue of desk data? Physical document security As of January 2021, it’s said that one in three UK workers are based exclusively at home. That’s millions of individuals from a variety of sectors, all of which must continue in their efforts to remain data secure. With that, reports of cyber security fears are consistently making the news but that shouldn’t be the sole focus. There is also the underlying, but growing, issue of physical document security. The move to remote working hasn’t removed these physical forms of data – think hard drives, USBs and paper based documentation. A recent surge in demand for home printers for example, only exemplifies the use of physical documents and the potential security issues home offices are facing. Adding to that, research conducted in 2020 found that two out of three employees who printed documents at home admitted to binning those documents both in and outside of their house without shredding them. Data security concern Without the right equipment, policies and guidance, businesses are sure to be at risk Those findings present a huge data security concern, one that must be fixed immediately. The Information Commissioner’s Office (ICO) has since released guidance for those working from their bedrooms and dining tables. Designed to help overcome these challenges, the ‘security checklists’ and ‘top tips’ should be the first port of call for many. Yet throughout, the ICO make reference to ‘following your organisation’s policies and guidance’ – highlighting that the onus isn’t solely on the individuals working from their makeshift offices. Office managers have a monumental task on their hands to ensure teams are well equipped within their home setups. Without the right equipment, policies and guidance, businesses are sure to be at risk. But it would be wrong to insinuate that unsecure desk data has only now become an issue for organisations. Modern office spaces Keeping clear desks has long been a battle for many office managers. In fact, clear desk policies are practised in most modern office spaces, with it recognised as a key preventative to personal information being wrongly accessed and so falling foul of GDPR legislation. Throwing sensitive documents in the bin was never an option pre-pandemic However, the unsupervised aspect of home working has led to a potentially more lax approach to these policies, or in some cases, they can’t be followed at all. For those taking a more laid back approach, organisation leaders must remind staff of their data security responsibilities and why clear desk policies have previously proven effective. Ultimately, throwing sensitive documents in the bin was never an option pre-pandemic and this must be carried through to home workspaces now. Securely destroy documents There are also concerns over the equipment people have access to at home. For example, without a reliable home shredding solution, data security suddenly becomes a tougher task. To add to that, several recommendations state that employees working from home should avoid throwing documents away by instead transporting them to the office for shredding once lockdown rules ease. While this is an option, it does pose further issues, with document security at risk of accidental loss or even theft throughout the transportation period, not to mention the time spent in storage. The best and most effective way to securely destroy documents is at the source, especially in environments where higher levels of personal data is regularly handled. Correct shredding equipment The recent findings on home office behaviour represent a true security risk Only when home workers implement their own clear desk policies alongside the correct shredding equipment (at the correct security level), can both home office spaces and regular offices become data secure. Realistically, these solutions should, like the common home printer, become a staple in home office spaces moving forward. The likelihood is that many UK workers will remain in their home offices for the foreseeable future, only to emerge as hybrid workers post-pandemic. And while the current working environment is more ideal for some than others, the recent findings on home office behaviour represent a true security risk to organisations. With this in mind, it’s now more key than ever for business leaders, their office managers and homeworkers to all step up and get a handle on home data security policies (as well as maintaining their standards back at the office) – starting with the implementation of clear desk policies. After all, a clear desk equals a clear mind.

The past decade has seen unprecedented growth in data creation and management. The products and services that consumers use every day – and the systems businesses, large and small, rely on – all revolve around data. The increasing frequency of high-profile data breaches and hacks should be alarming to anyone, and there’s a danger data security could worsen in the coming years. According to DataAge 2025, a report by IDC and Seagate, by 2025, almost 90% of all data created in the global datasphere will require some level of security, but less than half of it will actually be secured. Nuanced approach to data security Security is a circle, not a line. Every actor involved in the handling and processing of data has responsibility for ensuring its securityThe rapid proliferation of embedded systems, IoT, real-time data and AI-powered cognitive systems – as well as new legislation like the European Union’s GDPR – means that data security has to be a priority for businesses like never before. With data used, stored and analysed at both the hardware and software level, we need a new and more nuanced approach to data security. Security is a circle, not a line. Every actor involved in the handling and processing of data has responsibility for ensuring its security. What this means in practice is renewed focus on areas of hardware and software protection that have previously not been top of mind or received large amounts of investment from businesses, with security at the drive level being a prime example. The importance of data-at-rest encryption In a world where data is everywhere, businesses need always-on protection. Data-at-rest encryption helps to ensure that data is secure right down to the storage medium in which it is held in a number of ways. Hardware-level encryption, firmware protection for the hard drive, and instant, secure erasing technology allow devices to be retired with minimal risk of data misuse. Data-at-rest encryption helps to ensure that data is secure right down to the storage medium in which it is held in a number of ways A recent report from Thales Data Threat found that data-at-rest security tools can be a great way to help protect your data. However, it’s important to note that this must be used in conjunction with other security measures to ensure that those that fraudulently gain access to your key management system can’t access your data. Ensuring drives to be Common Criteria compliant One straightforward test any business can do to ensure its storage is as secure as possible is to check whether the drives are Common Criteria compliantDespite the clear benefits, this kind of encryption lags behind other areas, such as network and endpoint security, in terms of the investment it currently receives. The same Thales Data Threat report found that data-at-rest security was receiving some of the lowest levels of spending increases in 2016 (44%), versus a 62% increase for network and a 56% increase for endpoint security. One straightforward test any business can do to ensure its storage is as secure as possible is to check whether the drives are Common Criteria compliant. Common Criteria is an international standard for computer security certification, and drives that meet this standard have a foundational level of protection which users can build on. Providing an additional layer of security The retail industry has seen a spate of security breaches recently, with several major US brands suffering attacks over the busy Easter weekend this year. As frequent handlers of consumer card information, retailers are particularly vulnerable to attack. Data-at-rest encryption could enhance security in these instances, providing an additional layer of security between customer records and the attacker The advanced threats retailers face can often evade security defences without detection. Such a breach could grant attackers unrestricted access to sensitive information for possibly months – some breaches are known to have been detected only after consumer payment details appeared on the dark web. These types of undetected attacks are highly dangerous for retailers, which are relatively helpless to protect consumer information once their defences have been compromised. Data-at-rest encryption could significantly enhance security in these instances, providing an additional layer of security between customer records and the attacker which has the potential to make the stolen data valueless to cyber criminals. Industries in need of data-at-rest encryption Healthcare organisations, which hold highly sensitive customer and patient information, have a strong use case for data-at-rest encryption. With the widespread adoption of electronic patient health records, that data is increasingly more vulnerable to attack. Recent research from the American Medical Association and Accenture revealed that 74% of physicians are concerned over future attacks that may compromise patient records. With the widespread adoption of electronic patient health records, that data is increasingly more vulnerable to attack The financial sector would also benefit from further investment in data-at-rest encryption, given 78% of financial services firms globally are planning on increasing their spending on critical data, according to Thales’ Data Threat Report. It’s helpful to view security as a circle in which every piece of hardware and software handling the data plays its part SMEs and enterprises are not immune to security threats either – with growing numbers of people traveling for work or working remotely, the risk of sensitive business data becoming exposed via device theft is heightened. Usernames and passwords have little use if thieves can simply remove unencrypted hard drives and copy data across. Securing every hardware and software Technology vendors often focus on aspects of hardware and application security that are within their control. This is understandable, but it risks proliferating a siloed approach to data security. There is no single line for data security -- rather, it’s helpful to view it as a circle in which every piece of hardware and software handling the data plays its part. There’s a clear need for more industry dialogue and collaboration to ensure data security is effectively deployed and connected throughout the security circle and across the value chain.

The use of facial recognition has become a highly debated topic recently, and has increasingly and misleadingly been criticised by some for being an unethical tool used to spy on the public. The reason for such criticism is however largely due to lack of information and regulation around the technology. Used proportionately and responsibly, facial recognition can and should be a force for good. It has the ability to do a lot more to increase security in the future – from street crime to airport security, all the way through to helping those battling addiction, the technology can take security and operations to new heights. The rise in knife crime Knife crime has dominated the headlines in the UK throughout the year. Recent statistics show the number of people being admitted to emergency care due to attacks by a sharp object to be up by nearly 40 per cent from two years ago, whilst the number of children under the age of 18 being admitted to hospitals with stab wounds is up by 86 per cent in only four years. This recent surge in knife crime has put police forces under immense pressure, and the intelligent use of facial recognition has a role to play in enabling more informed stop & search interventions. Currently UK police can stop and search an individual they suspect to be carrying drugs or weapons or both, or they can stop and search a person in a location where there have been or are considered likely to be “incidents involving serious violence.” In both cases they must do so with access to limited information, leaving themselves open to accusations of bias or discrimination. Knife crime dominated the headlines in the UK throughout 2018 Police systems benefiting crime investigations This is where facial recognition can offer up additional intelligence. These systems can memorise the faces of persons of interest, networks of gang members, wanted criminals and those suspected of involvement in serious violent crimes. Furthermore, these systems don’t need prior personal engagement to recognise an individual and see only data, not gender, age or race.  The technology doesn’t take the decision away from the human police officer. However, it does bring greater transparency and context to the decision-making process of whether a stop and search intervention is justified.  Similarly, the advanced technology can recognise and match an individual seen on a CCTV camera at a crime scene to someone the police encounters on the streets some time later, justifying a stop and search on that individual. Its ability to check in real time if a person is on a criminal watchlist adds an extra layer to the decision-making process prior to conducting a stop and search, lowering the likelihood of discrimination. Facial recognition thus helps eliminate both weapons and criminals off the streets and potentially prevent crimes before they have a chance to take place. Gambling addiction and how facial recognition can help There are an estimated 593,000 people in the UK currently battling a gambling problem, making it a serious public health issue in the country. Having understood the gravity of the issue, the UK gambling commission have set limits and advice in place to help those suffering this addiction; yet as with all addictions, gambling is a tough habit to beat. In order to put effective limitations in place and make a real difference, the gambling commission needs the right technology to protect those most vulnerable in the industry.   Facial recognition technology is able to keep track of customers and thus help gambling companies in protecting their customers   Facial recognition technology is able to keep track of customers and thus help gambling companies in protecting their customers to a higher degree. Monitoring those entering and moving around gambling areas is an extremely difficult task for human staff to do alone, especially in large crowded areas such as casinos. Facial recognition technology installed around the premises would be able to help the company and the staff to identify people who have registered as gambling addicts, and keep record of their day’s play in order to inform staff if and when it was time for them to stop. It would also be able to ensure effective self-exclusion procedures, by identifying a self-excluded individual via CCTV as soon as they entered the venue to then allow security staff to respectfully escort them out. Utilising facial recognition at airport security Facial recognition has by now become a normal sight at many airports around the world. Several people today hold a so-called biometric passport, which allows them to skip the normally longer queues and instead walk through an automated ePassport control to proceed to the gate faster without having to deal with control officers. Facial recognition used in this way has managed to significantly cut waiting times at the passport control, but it also has the ability to enhance security in and around airports. Facial recognition uses algorithms to match physical characteristics against photos and videos of people's faces Earlier this year, facial recognition technology managed to catch an imposter trying to enter the US at the Washington Dulles Airport. The false passport may have been uncaught by the human eye, yet due to the accuracy of the facial recognition technology it managed to help officers catch the imposter and bring him to justice. Facial recognition thus allows officers to identify an individual faster and more accurately than the human eye. Facial recognition uses algorithms to match physical characteristics against photos and videos of people's faces, which have been collected from visas, passports and other sources.   Facial recognition allows officers to identify an individual faster and more accurately than the human eye Whilst some critics may worry about issues of privacy related to the technology, at airports the use of facial recognition has proved to both enhance security as well as speed up processes such as check-in and, in the future, even boarding proceedings. At airports the use of facial recognition has proved to both enhance security as well as speed up processes such as check-in If used correctly and proportionately, facial recognition can help safeguard the public and improve national security on several fronts. Whilst the many benefits of facial recognition are evident, the lack of regulation and understanding of the technology has led to misconception around how it works and what it is used for. Facial recognition technology can match faces in crowded public places against criminal watch lists, and register faces that match with those on criminal watch lists – whilst ignoring everyone else.

Attracting trade visitors from across the subcontinent, the region’s most influential trade fair for the security industry, Secutech India, is scheduled to return for its 9th edition from 7 – 9 May 2020 at the Bombay Exhibition Centre, Mumbai. With exhibitor registration still open, the fair has already attracted more than 350 of the world’s leading security brands with less than three months remaining before it commences. The 2020 exhibition will feature Axis Communication, CP Plus, Hikvision, ZKTeco, Infinova, Matrix, Toshiba and many more. Security devices and turnkey solutions The 2020 edition of Secutech India is set to reflect the country’s digital transformation Detailing the business value of the fair, Ms Regina Tsai, the General Manager of Messe Frankfurt New Era Business Media Ltd said: “Catering to local market requirements such as cost efficiency and a need for fast project implementation, Secutech India assembles the full range of security devices and turnkey solutions under a single roof. Benefiting from its position in Mumbai, India’s commercial centre, last year the fair attracted more than 20,000 buyers travelling from across India’s main regions, and we are looking forward to welcoming even more business this coming May.” The 2020 edition of Secutech India is set to reflect the country’s digital transformation. IP cameras are in high demand from SMEs, retail and the residential segment, while biometric access control systems are also gaining popularity in offices and at border controls, with users gradually favouring contactless systems such as facial recognition above fingerprint biometrics. Core security solutions In the view of Ms Tsai, this year’s fair is taking place at a favourable time for the regional industry: “The government aims to transform India into an electronics export hub, which will open up new opportunities for component manufacturers catering to the local manufacturing sector. But just as importantly, as part of India’s proposed Union Budget 2020, infrastructure development across roads, railway, airports, ports, and economic corridors are expected to raise demand for core security solutions including video surveillance, video analytics, biometrics and intruder detection systems." "The governments ‘Digital India’, ‘Smart City Mission’, and ‘Technology Empowerment’ initiatives will also be growth drivers.”  Access control in healthcare facilities As a maturing security market, the appetite for knowledge in India is growing" Among many benefits, the ability to make onsite comparisons, conduct meaningful business discussions and view product demonstrations are a few of the show elements that visitor’s to Secutech India value. According to Ms Tsai, business effectiveness is the top priority for the fair’s organisers: “Initiatives such as the ‘Secutech connect’ business matching service which links buyers with exhibitors based on industry background continue to be highly popular, helping us to generate genuine business outcomes for participants.” But beyond business, information exchange is also a priority says Ms Tsai: “As a maturing security market, the appetite for knowledge in India is growing. This is a need that the upcoming edition of Secutech India will cater for with a series of conferences dealing with topics relevant to the local market, including cyber security, smart city digital infrastructure; the convergence of 5G, artificial intelligence, data analytics and the IoT; access control in healthcare facilities, and fire safety in elderly care homes and restaurants.” Personal protection equipment In addition to its core focus on security, Secutech India 2020, in cooperation with the GPS Association of India, will feature a pavilion dedicated to fleet management, vehicle tracking as well as passenger and driver safety. The concurrent ‘Fire and Safety India’ event will also return as the destination for trade buyers to locate the latest firefighting gear, personal protection equipment and smoke detection systems.

Promise Technology Inc., global storage solutions provider for the M&E market, has launched its Atlas series of NAS shared storage solutions, and new SANLink3 N1, a Thunderbolt 3 to NBASE-T Ethernet adapter. Both products deliver the combination of performance and affordability that creative professionals in small workgroups need. At the NAB Show, Promise also announced that it is one of the first-to-market with colossal 14TB hard drives from Toshiba Electronic Devices & Storage Corporation, across all of its product lines. Atlas series of NAS shared storage solutions The Promise Atlas series features easy and fast NAS connectivity over Thunderbolt3 and 10G Ethernet, with massive capacities and great value. The Atlas S8+, an 8-bay desktop and Atlas S12+, a 12-bay rackmount unit, include Enterprise-class features with a simple-to-use GUI making them perfect for the burgeoning small-workgroup shared storage market. The SANLink3 N1 revolutionises how creative professionals connect Thunderbolt 3 devices to an existing Ethernet infrastructure The SANLink3 N1 revolutionises how creative professionals connect Thunderbolt 3 devices to an existing Ethernet infrastructure. The high-speed NBASE-T technology maximises the available line rate of Thunderbolt 3 to provide portable and desktop systems with high-speed Ethernet connectivity at 1, 2.5, 5 and up to 10G speeds that streamlines creative and high demand workflows with plug-and-play ease. The bus-powered, pocket-sized, whisper quiet and lightweight SANLink3 N1 with no power adapters or big bulky boxes and a plug and pay approach makes it incredibly easy to transport and use. Build-to-Order (BTO) platform Promise’s recently announced Build-to-Order (BTO) platform that enables users to custom-configure the renowned Promise Pegasus3 series of desktop RAID storage solutions. Creative professionals seeking speed, redundancy and higher capacities can use the BTO options – found at Promise’s eStore – to create the exact combination of Solid State Drives (SSD) and Hard Disk Drives (HDD) they need for their individual workflows. “Promise listens to our end-users and delivers solutions that address key needs,” said Vijay Char, president, Promise Technology USA. “The Atlas series and SANLink3 are the newest products in our broad range of solutions for our media and entertainment industry customers that deliver the highest levels of performance along with the quality, reliability and support from Promise that they are accustomed to.”

At Intersec 2017, Promise will introduce Vess A6120, a complete 1U 4-bay product line After record growth in the Middle East and North Africa (MENA) region in 2016, Promise Technology returns to Intersec 2017 in Dubai with the company’s largest and most exciting display ever. Promise will be joined at its booth by 17 ecosystem partners, showcasing countless integration possibilities and new technologies which will be highlighted in the Promise Presentation Theatre. Additionally, the strong growth in the MENA region has led to the development of several new solutions on display from Promise, including the upcoming Auryn surveillance storage block, Vess A6120 1U 4-bay server appliance, and the Vess A3340 NVR with dual power supply units (PSU).Auryn surveillance storage blockAt Intersec 2017, Promise will introduce Vess A6120, a complete 1U 4-bay product line with a management server, analytics server, and recording server. Additionally, Promise will introduce Auryn, a new high-capacity surveillance storage block designed to meet the needs of the MENA region which has some of the longest retention times in the world. Auryn is a simple way to deploy a whole storage block and is ideal for deployments requiring a large centralised storage solution which offers an open-platform, simplicity, optimisation, and the industry’s most comprehensive partner ecosystem. Additionally, Promise will debut the Vess A3340 with dual PSUs, a key feature in applications where power supply redundancy is necessary.Promise Presentation TheatreIntersec’s most popular tradeshow seminar, the Promise Presentation Theatre, is back with more exciting topics covered by the industry’s top companies and influencers. Intersec attendees are invited to visit the Promise display to learn more about the trends shaping the industry and after every presentation Promise will be giving away a fantastic prize to one of the visitors.Partner ecosystem "Intersec Dubai is a great platform for Promise to showcase why we are the preferred server and storage developer for the video surveillance industry” 17 companies will be joining the Promise partner showcase at Intersec, including Aimetis, Allied Telesis, Axis, AxxonSoft, Bosch, C-Link, Digifort, Hanhwa Techwin, Intelligent Security Systems (ISS), Ipsotek, IronYun, Milestone, NEC, Securitas, SeeTec, Toshiba, and Trassir. The top companies responsible for the most exciting innovations in the security industry in areas such as video management software (VMS), IP cameras, video analytics and hard disk drives will showcase their solutions along with Promise’s servers and storage solutions in interactive demonstrations."Intersec Dubai is a great platform for Promise to showcase why we are the preferred server and storage developer for the video surveillance industry,” said John van den Elzen, General Manager, Surveillance Business Unit, Promise Technology. "We are really looking forward to working together with all of our partners at Intersec as we will showcase our complete range of Vess NVRs and external storage solutions and also offer a look at some exciting new solutions that we will be launching soon.”For more information, please visit Promise at booth SA-C26 at the Dubai International Convention and Exhibition Centre during Intersec from January 22nd – 24th, 2017.