Security best practices are changing continuously with new vulnerabilities being discovered every day. This means your old access control solution may not support the latest encryption technologies and patches may not be available to mitigate zero day vulnerabilities.
The ideal choice is to select access control devices and software that are proven “cyber secure” to reduce loss due to data theft and breach. That’s why NET100 has partnered with Brivo. Together we implement access control solutions that provide reliable protection for your people and property.
But some access control vendors do not always factor security into the design and building phase of their access control solutions. This could result in vulnerabilities that can be exploited when they could have been remediated much earlier in the development process.
Questions to Ask Prospective Access Control Vendors
The ideal choice is to select access control devices and software that are proven “cyber secure” to reduce loss due to data theft and breach. That’s why NET100 has partnered with Brivo. Together we implement access control solutions that provide reliable protection for your people and property.But some access control vendors do not always factor security into the design and building phase of their access control solutions. This could result in vulnerabilities that can be exploited when they could have been remediated much earlier in the development process.
Questions to Ask Prospective Access Control Vendors
- Are your engineers provided with secure development training upon hire and at least annually thereafter?
- Is security built into the software development life cycle (SDLC) including during design, development, and release?
- Are all of your releases scanned for vulnerabilities including in your code and in your referenced libraries?
- Are your applications and systems penetration tested by a third party for vulnerabilities at least annually?
- Do you use modern encryption technologies for data at rest and in motion such as AES-256 and TLS 1.3 respectively?
- For control panels, is a unique digital certificate issued for each control panel during manufacturing for mutual authentication?
- For applications, are multi-factor authentication and/or single sign on options available?
The best vendors harden their infrastructure to ensure the confidentiality, integrity and availability of systems and data. The networks they use will have a multi-layered security model. They will provide redundancy, business continuity, and risk management.
Contact NET100 today to discuss your access control needs at (703) 995-5200 or via email at info@net100ltd.com.