A new day for business security

PAC System Integration - Some comments...: Some issues & solutions you missed in your story:

1. You do not need to integrate every PAC (Physical Access Control System) to meet the needs of integrated physical and logical security. You do however, need to at least be integrated with the CMS system(s) to deactivate cards, and be able to integrate workflow into a provisioning system so that when someone is terminated you can alert the person in charge of managing a non-networked PAC system to disable the account. Deactivation of the CMS is first, and cleaning up the PAC DB is second in this situation.

2. Another thing complicating the issue is owned versus leased buildings. Most large companies have a mix, and so you will also have a mix of managed and non-managed resources unless a company has implemented a "one-badge" project. In taking stock of the PAC systems and touch points, you will want to coordinate with the corporate real estate team to understand the mix.

3. More important in something like HSPD 12 & SOX is the level of physical access, and how this changes over the lifecycle of the employee or contractor. Identity management SIs need be aware of, diagnose and add control of physical access policies to their list of key controls.; Posted by: sd5512892 Posted on: 03/25/07 You are currently: a Guest | Members login | Terms of Use