Cyber-Physical Security of Fire and Security Systems

Hazard picture

Fire detection, intrusion detection, video and access control systems are increasingly networked, IP-connected and remotely maintained, turning them into a potential target for manipulation, sabotage or use as an entry point into other operational networks. A compromised detection system can suppress alarms or fake normal operating states without this being immediately apparent on site.

Protection measures

A risk-oriented protection approach includes network segmentation of security and fire protection technology from the rest of the IT environment, restrictive access rights for remote maintenance, documented patch and update processes, and procuring components with proven cyber security credentials under recognised test specifications. Contingency plans must also cover failure of the detection system itself.

Insurance relevance

The interface between traditional property insurance and cyber insurance is becoming more important, since a cyber attack on security or fire protection technology can trigger both property and cyber losses. Insurers increasingly examine whether security-relevant building technology is included in a company’s cyber risk management in order to avoid coverage gaps at this interface.