By W. Hord Tipton, CISSP, Executive Director, (ISC)² and Michael Stack, Chief Executive Officer, ASIS International
The mass migration of everyday objects becoming interconnected, or the “Internet of Things (IoT)” as the industry has coined it, exemplifies the merger between traditional and logical security. With the IoT, we must ask ourselves where traditional security begins and logical security ends. From security cameras to cars to medical devices and now even home appliances like refrigerators, what, if anything, can be identified as only traditional or logical security anymore?
“When a device accesses the Internet, it’s given a unique IP address,” said W. Hord Tipton, CISSP, executive director, (ISC)². “IoT has dramatically boosted the demand for additional addresses, prompting the move from IPv4 to IPv6. IPv6 has the potential to put IP addresses on everything. When an object has a digital identification, it makes the object susceptible to unauthorized access, attacks, and the like.”
Simply put: Technology is changing the way we live. We’re adopting technology into every aspect of our lives for convenience factors, but the adoption is surpassing our ability to secure it. Some of the (ISC)² Application Security Advisory Council members recently shared their thoughts on how software is changing our lives now and in the future.
As attackers and adversaries become more sophisticated in their efforts, we are increasingly seeing exploits that involve both traditional and logical attack vectors. This convergence of threats has created an unprecedented need for a uniting of traditional and logical security strategies.
“We’re experiencing an increasing rate of assimilation of a variety of technologies into the functions of traditional security jobs,” said Michael Stack, chief executive officer, ASIS International. “For example, police use technology to track criminal activity and security guards monitor cameras that transmit data over networks. Making a clear distinction between what qualifies as traditional security versus logical security has become increasingly difficult, and will only continue to further amalgamate in the future.”
Further, it’s critical to note how security impacts business. Security must become an integrated player in the overarching goals of the business. Security professionals must adapt their breadth of knowledge into a language that resonates with the C-suite. It must be perceived as an enabler for management rather than an inhibitor. Safety and security transcend all business disciplines, so consideration must be made for how the convergence of traditional and logical security will affect the business world.
Both (ISC)² and ASIS recognize that convergence is the future of security. An alliance between the two organizations is a natural fit, given their membership focus, professional development resources, and social responsibility efforts. Furthermore, both organizations’ reputations for standards and emphases on continuing education make the results of their collaboration dually fulfilling for security professionals worldwide.
The combined ASIS International Seminar & Exhibits and (ISC)² Security Congress events bring together traditional and logical security professionals to create the largest security event of its kind in the world. This event is a prime opportunity for security professionals actively engaged in the protection of people, property, and information to advance the integration of security into business. Security changes rapidly and ensuring that the professionals charged with protecting the business remain current is an essential business function.
Through this event, ASIS and (ISC)² are leveraging joint expertise and resources to present two events in the same location with one focus: to provide traditional and information security professionals with the knowledge, technology, and networking opportunities they need to excel in their careers and secure their organizations’ people, property, and data. The exhibits area will be buzzing with action as well, offering live demonstrations from some of today’s most well-known security vendors. Don’t forget to register for ASIS International Seminar & Exhibits and (ISC)² Security Congress, taking place September 29-October 2 at the Georgia World Congress Center. We both look forward to welcoming you to what promises to be another successful joint event in Atlanta.