Understanding How Threats to the U.S. Energy Grid Mark a Big Physical Security Risk

Right now, news headlines are filled with information on major national security threats. From UAPs (unidentified aerial phenomena) to continued personal cybersecurity threats, national security is front and center.

In a recent piece for Forbes, Chuck Brooks, a globally recognized thought leader and subject matter expert in cybersecurity and emerging Technologies, details some major threats to the U.S. Energy Grid and what that would mean for the United States’ overall security. Brooks, an adjunct faculty member at Georgetown University’s Graduate Cybersecurity Risk Management Program, writes that the nation’s energy grid system is very vulnerable right now.

“The underlying reality is that from an energy frequency perspective, the aging U.S. Energy Grid infrastructure is extremely vulnerable to cyber-attacks, physical incidents, and existential threats,” writes Brooks.

What the U.S. Energy Grid Is

It is important to note just how crucial the energy grid is.

The nation’s system consists of The Eastern Interconnection (the states east of the Rocky Mountains), The Western Interconnection (the Pacific Ocean to the Rocky Mountain states), and The Texas Interconnected system.

Collectively, these systems make up the U.S.’s entire energy infrastructure, fueling everything that makes modern life function. The central nervous system of this grid is made up of 7,300 power plants, close to 160,000 miles of high-voltage power lines, and millions of low-voltage power lines and distribution transformers.

While this system is so crucial, it is aging. The infrastructure has remained stagnant for decades, and Brooks views this as a salient physical security threat if it were ever to be compromised.

Major threats to the grid

He pinpoints three major threats right now:

• Cyber threats to the grid: Brooks says that, today, U.S. power companies use SCADA (Supervisory Control and Data Acquisition) networks to control their energy systems. Many of these are aging severely and prone to being manipulated by cyber-attacks. This has a domino effect, directly resulting in damaging physical vulnerabilities. Brooks points to the 2021 ransomware attack on the Colonial Pipeline as a template for what could happen to the energy grid.
  
  “The attackers disrupted the supply of oil supplies on the U.S. East coast and demonstrated the lack of a cybersecurity framework for both preparation and incident response,” he writes. Given that most U.S. Energy Grid infrastructure consists of components that “operate in a digital environment,” Brooks said systems that aren’t fortified with defenses against online attackers pose a threat to all American citizens.

• Physical attacks on utilities: Brooks writes that physical attacks “by domestic terrorists” on the U.S. Energy Grid are becoming more of a concrete reality. He said that current government data reveals “physical attacks on the grid rose 77% in 2022.” He points to white supremacist attacks on the northwest power grid electrical substations in Oregon and Washington state in 2022. Similarly, attacks at two energy substations in North Carolina resulted in residents losing power. “In January 2023, a bulletin from the Department of Homeland Security (DHS) warned that domestic violent extremists ‘have developed credible, specific plans to attack electricity infrastructure since at least 2020, identifying the electric grid as a particularly attractive target,’ ” he writes.

• Natural threats: Additionally, Brooks cites what he calls “existential threats” — weather events, solar storms, and electronic magnetic pulses (EMPs), which come from solar storms. These naturally occurring physical threats “are top factors for power outages in the United States.” Events like hurricanes and tornados pose major physical threats to communities served by the U.S. Energy Grid.
  
  As climate change increasingly becomes a factor in fueling major weather events, Brooks says the grid has to be regularly fortified and modernized to prepare for more radical changes in natural phenomena. He also cites Dr. Peter Prey, a member of the Congressional EMP Commission and executive director of the Task Force on National and Homeland Security, who says “a natural EMP catastrophe or nuclear EMP event could black out the national electrical grid for months or years and collapse all the other critical infrastructures…necessary to sustain modern society and the lives of 310 million Americans.”

Updating a crucial system

What all of this underscores is that a strong U.S. Energy Grid is needed for our modern society. While it may sound like a large scale issue that does not directly impact one’s day-to-day life, if the grid was to be compromised in any way by these increasing threats, it would pose a direct danger to one’s physical security and personal safety.

How to Stay Safe in an Era of Mass Shootings

Right now, American news headlines are certainly upsetting. With consistent reports of mass shootings, the importance of maintaining one’s personal physical safety is front and center.

According to a recent CNN report, “there have been more shootings than days so far this year” as well as more shootings than at this point in any year since at least 2013.”

As of the writing of this post, there have been more than 40 reports of mass shootings around the United States this year.

Different kinds of mass attacks

Each mass shooting not only marks a grave national tragedy, but it refocuses the importance of keeping one’s personal physical security in check. According to the United States government, shootings are one of many common types of public mass attacks. These include:

• Active shooting attacks in which individuals use firearms to cause mass casualties

• Situations where individuals use a vehicle to cause mass casualties

• Attacks where homemade bombs are used to inflict mass casualties

• Attacks using other methods to inflict casualties, such as the use of knives, fires, drones, or other weapons

Be prepared to respond to a shooting ahead of time

Knowing how best to respond to an attack — like a mass shooting — in a public space can be difficult in real time. The government says:

• Be alert and aware of one’s surroundings

• Practice the mantra most people have heard since childhood: “If you see something, say something” — if someone is behaving strangely or there is a potential suspicious weapon in a nearby person’s possession, please report it to the closest authorities

• This entails being observant of warning signs

• Also, always have an exit plan, which means identifying nearest exists

 While an event like a mass shooting is happening, FEMA outlines what one should do:

•  Seek safety — get away from the attacker wielding a gun or other weapon in the public space

• Cover and hide — find a way to seek shelter and hide if there is no quick, safe, or easy way to evacuate right away

• Fight as a last resort — if there is no way to take cover, hide, or exit, find a way “to disrupt or disable” the attacker as a last resort only

• Take care of yourself — a person should take care of oneself first and foremost and then, if one is able, assist the wounded and help them get to safety so that they can receive immediate care from first responders

St. Mary’s College of Maryland provides helpful tools for what to do immediately following a mass shooting attack:

• Wait for help — after the attack subsides, wait for local law enforcement officers to provide assistance, like directing one to a building’s exit

• Show you are unarmed — when a law enforcement officer approaches, one must display their empty hands with open palms to show they are not the shooter themselves

The fact that mass shootings — and other public attacks — are a common, very real physical safety threat is upsetting. Due to their frequency, it is important that one be prepared to keep themselves, their loved ones, and those around them safe and secure.

How TSA Improvements Have Physical Security in Mind

Recent changes made by the Transportation Security Administration (TSA) in 2022 were designed to keep the physical security of airports and planes themselves front and center. A recent article by Security Magazine sheds a spotlight on how these updates to TSA protocols were designed to bolster physical security.

When put in place, these efforts established “a new record in firearm interceptions” by TSOs (Transportation Security Officers) at airport checkpoints, for instance. More than 6,500 firearms were intercepted at the nation’s airport checkpoints. The agency reports 88 percent of those firearms were loaded.

To make sure firearm threats are reduced at the nation’s airports, the agency installed a penalty of a loss of TSA PreCheck eligibility for up to five years for those who are in possession of a firearm at a checkpoint. The maximum civil penalty for a violation of firearm possession was increased to nearly $15,000.

Additionally, more than 2 million passengers daily were screened across airports nationwide.

As with all sectors, the airline industry was hit hard by the global COVID-19 pandemic. In 2022, TSA wanted to ensure that security was boosted, as Americans began to resume traditional travel behaviors.

The article states that TSA “provided airport screening at or near pre-pandemic travel volumes” even though the past year saw several major disruptions from weather events around the country. The agency also improved their cybersecurity capabilities and “continued to test and deploy new technologies that improve security effectiveness, efficiency, and the passenger experience.”

The TSA made sure to meld tried-and-true physical security protocols with state-of-the-art technology.

They used 534 credentialed authentication technology (CAT) units for security checks to reduce physical contact made by agents, instituting 243 computed tomography (CT) X-ray scanners at airport checkpoints. To make this all run as smoothly as possible, Security Magazine reports that the 2023 Omnibus Bill that just passed “will enable technology deployments to continue across the agency’s nearly 2,400 security checkpoint lanes.”

As air travel continues to keep up with pre-pandemic levels, it’s important that physical security be as rigorous as possible. The article points to the fact that TSOs screened 736 million passengers over the course of 2022.

In the same way that physical security is crucial for financial institutions, schools, and healthcare systems, it’s important that travelers feel as secure as possible when boarding a plane. The TSA’s emphasis on improved physical security protocols is essential, and something that will only continue to be centered as 2023 progresses.

Why Physical ID Badges Will Be a Thing of the Past

Physical ID badges are a common part of daily life. From needing them to access services and buildings on a university campus to entering your typical corporate office building, a simple ID badge you wear on your person or carry with you on a keychain has been an indispensable part of physical security.

Now, security experts are saying the ID badge might be a thing of the past.

In a new interview with Security Magazine’s Madeline Lauver, Jesse Franklin, senior vice president U.S. & Canada at Incode, theorizes that physical ID badges will most likely be out of favor in the next 10 years.

Franklin points to the fact that forms of digital authentication have risen in accepted common security practice in recent years — something accelerated during the COVID-19 pandemic as a result of the push toward contactless interactions.

“In a recent third-party survey conducted among 1,000 respondents, an increasingly large number of [users] agree that they would commit to a fully digital lifestyle where they could use digital authentication for all daily processes,” Franklin told the magazine.

That does come with some reservations. Cybersecurity concerns over private information always surround conversations around a push toward digitization of traditionally physical security protocols like ID badges.

That being said Franklin emphasized that recent research reveals digital authentication might make for more secure practices rather than a physical ID badge.

“By 2030, I predict that physical forms of identification will be obsolete with all, if not most, businesses having some form of digital authentication in place,” Franklin added.

This shift won’t happen overnight.

Given how embedded our reliance on physical forms of identification is in our society, it will take a while for businesses to begin to phase out these tried and true measures of ID and move to their digital counterparts.

Franklin laid out an approach for what needs to be done by firms as they look to the next 10 years of how they want to handle identification.

"First, they need to fully analyze their organization’s security posture and vulnerabilities in order to activate a successful authentication system,” Franklin stressed. “They then must activate a secure database, regularly updating their records of those barred from building access who may pose using false credentials. Digital authentication technology will continue to advance and will soon become the standard for all physical security settings."

A Look How Top Physical Security Practices Rely on Both Video and Access Control

When it comes to ways to beef up one’s physical security protocols, the key is to embrace complementary technologies that work together to keep you, your business, your data, and your valuables safe.

In a recent post for TechTalks, Luke Fitzpatrick outlines that using state-of-the-art video surveillance systems coupled with access control technologies is the best way to ensure you are well secured. He stresses that traditionally, security systems should stand on their own, and not be integrated with other security technologies. While this approach might have worked best in the past, it is not acceptable in a 21st-century security era when cloud-connected devices, and artificial intelligence (AI)-powered systems, among other options, are ways to ensure your business is able to withstand modern crime — of both the cyber and physical varieties.

In the piece, Fitzgerald singles out the fact that modern door readers to detect and assess who is about to enter your business or office should be outfitted with video capabilities. This should be at all entry points at a company’s physical campus.

One challenge that can come with the pressure to have video integrated at all aspects of physical security is that not all businesses can afford to have someone employed to constantly monitor video feeds at all hours of the day.

This is where cloud-based technology solutions factor in. Automated system alerts that are accessible remotely to security teams are key. Additionally, smart detection and infrared sensors can center accurate and efficient security detection for remote staff who need to be notified about real-time breaches.

With cloud-based options, it’s important to have strong security protocols on both ends.

Fitzgerald cites one company, Openpath, that enables authorized personnel to use a credential-encrypted app — passing their hand or their mobile phone over an access portal, for instance — that would allow them to enter a building.

Only those with the personalized app access would be able to enter. The company’s access control system that is based in the cloud gives 24/7 access to business owners or building landlords who need constant updates on who is visiting their space as well as information coming in on unauthorized individuals who are attempting to breach these security protocols.

This is just one example of how tech has become increasingly more sophisticated to best serve a business’s very 2022 security needs.

“The future of security tech is firmly in the hands of cloud-based solutions, and smart designs that can integrate seamlessly with one another to create unified security systems that are more secure than ever thought possible,” Fitzgerald writes, in closing. “Unifying video tech with access security solutions is one of the first important steps in this highly integrated tech-solution trajectory, and it’s starting to feel like the possibilities moving forward are limitless.”

How to Assess the Best Video Security System for Your Business

Whether you are starting a new small business, updating physical infrastructure of your company, or trying to make sure your staff and valuables are safe, it might be overwhelming to try to parse through the different options for video security systems.

Forbel Custom Security Solutions outlines some major factors you should keep in mind when selecting a video surveillance system for your business. Here’s a look at a few: 

• First of all, they say that you have to make sure you assess how sharp and clear the image quality will be and whether the camera you are selecting has “optical zoom.”

• Beyond this, you have to make note of the recording frame rate of a potential security camera. The lower the frame rate, the choppier the footage will be, the security company says.

• When it comes to camera models, it’s a very personal choice. You’ll have to sift through the various options to determine what suits your business’s needs. Some examples are bullet cameras, dome cameras, pant-tilt zoom cameras, thermal cameras, and panoramic cameras.

• You also have to pinpoint if you need cameras that have indoor or outdoor compatibility. If outdoors, you’ll need one that is weatherproof and one that might need to withstand dirt or water. The company suggests you check for Ingress Protection (IP) ratings for your potential camera before making that purchase.

• Make sure you assess the audio sensors that may or may not be part of your commercial security camera. Many on the market don’t pick up audio well, so it determines what your specific needs are. Some manufacturers will enable the camera to record audio. Also check in on local laws and regulations tied to whether audio recordings are illegal in your given state or municipality.

• Motion detection is another important feature to assess. Cameras that are on the more advanced end of the spectrum will have video analytics software. Having quality analytics that can assess and classify oncoming vehicles, people walking by, or people fighting outside your business, for example, are important to have in 21st century security systems.

• Wired or wireless? That’s a question you will want to answer as well. Wireless systems might be best for individual homes, whereas wired surveillance cameras make more sense for businesses.

• As with most aspects of modern security, cloud storage capabilities are crucial. Storing security data in the cloud is often augmented with physical storage as well that you install on a server. The more storage capacity the better so that you can access footage remotely and have a needed back log of recorded data.

No matter what, invest in the best video security system possible. In a separate piece for Digital Trends, Erika Rawes answers the question of “are security camera systems worth it?”

“Yes,” she writes. “Security camera systems can provide peace of mind, but they can also promote safety for customers, employees, and business owners. They may even help lower insurance costs in some cases.”

A Look at 5 2022 Security Trends

We’ve ended the first month of the new year and are into February. With the year still young, it’s a good time to look ahead at some of the trends that might be shaping the next 11 months of security.

U.K.-based security firm Calipsa recently outlined some of the key trends in physical security for this year. Of course, in our 21st century reality, the physical and digital are often combined. Artificial intelligence (AI) and IoT fuel most of the technology we use. When it comes to securing your business or your family home, Brian Baker, Calipsa’s Chief Revenue Officer outlines some of the big security trends you should keep in mind.

Here’s an overview of the five key trends from Baker’s post:

•   AI is the key

AI always seems to be at the top of the list. It’s embedded in almost all connected tech — from your phone to your building’s security cameras. Baker writes that AI in the security market was valued at $5.08 billion in 2020 and that number will hit as high as $14.18 billion by the year 2026. Baker says security-centric AI has shifted from mainly a “forensic analysis tool” that’s applied after an incident occurs to a preventive tool before your home or business faces a criminal breach. A big part of this is predictive data analytics, with machine learning using these predictive tools to make statistical decisions using data collected in real time.

•   The cloud is an indispensable tool

With work-from-home and a global economy meaning security interests extend worldwide, Baker spotlights the fact that remote security is increasingly becoming a major focus. Remote video monitoring was on the rise, but the realities of COVID-19 sped up that process. Baker cites his company’s 2021 Annual Report that found 75 percent of businesses surveyed reported using cloud-based video analytics — an increase of 8 percent from the year before. About 32 percent of respondents said they now used a remote security solution that is totally tied to the cloud. This all helps a business scale up. Baker says many security options are heading in the direction of a “software as a service” (SaaS) model — enabling for the flexibility of a subscription cloud service.

•   AI might help with staff shortages

We’ve all seen the headlines about mass staff shortages through all sectors of a global economy changed by the pandemic. Baker cites 31 percent of respondents in the Annual Report who say staff shortages were the “greatest challenge” of the past year. That number rose 20 percent since 2020. More than half — 55 percent — also said “staff shortage/sickness” stood as the “greatest operational challenge of the past year.” Baker says modern AI-powered security solutions can come to the rescue. Intelligent video analytics can serve as a 24/7 solution for monitoring security cameras in real time. AI can fill in the gaps left by a diminishing labor force.

•   Will the supply chain affect security in 2022?

The shift in the global supply chain function has had an impact on businesses. A big threat has been cargo theft as supply chains grind to a halt. Baker says modern security technology is being applied to help with these criminal threats but they come with some concerns of their own. The systems used to monitor and track vehicles and shipments are prone to hacks of their own. It’s a concern all of us in the security sector have to monitor as we progress through this year.

•   Physical and cybersecurity are becoming one

Baker points to something that has been evident for several years now — physical security and cybersecurity are becoming indelibly merged. Gone are the days when protecting cyber assets is a separate concern from shielding physical assets. Baker cites some have been leery to embrace this change. The 2021 Video Surveillance Report from IFSEC Global shows that 64 percent of respondents said cybersecurity concerns were a “barrier to cloud video adoption” for their security needs. While that is understandable, it’s crucial that proper training, education, and vetting be put in place within firms to ensure that cybersecurity standards are upheld — in this current market, one can’t afford to not augment physical with cybersecurity. The future isn’t either physical or cyber — it’s both.

How Smart Building Technology — Sensors, Apps, IoT — Can be Perfect for Corporate Security

We live in a connected age, where IoT (the Internet of Things) dominates our interactions with how we carry out our daily tasks, interpersonal communications, and the way we use common household appliances. It makes sense that also applies to our physical security and how businesses protect their assets.

For many, the practical way to embrace modern corporate security is to make the most of buildings that rely on smart building technology.

In a 2019 post, IoT World Today outlined the many benefits of smart building design in ensuring a businesses’ safety.

For example, state-of-the-art temperature sensors might detect unexpected temperature spikes in a data center, sending forth an immediate automated alert to administrators who can fix the problem. The tech website highlights Everbridge, an emergency communications company that enabled a pharmaceutical customer to use sensor data to assess whether or not a drug lot was overheating.

“We were able to save millions of dollars because we sent out an automated notification and [the customer was] able to quickly resolve the issue and not let the drugs go bad,” said Annie Asrari, director of product management at Everbridge, as cited by IoT World Today.

In these examples, corporate infrastructure outfitted with Internet-connected security technology could ensure that physical disasters — not to mention significant financial losses — were averted.

Smart building technology means more than just physical infrastructure — it means keeping your company’s employees constantly connected, aware of threats as they occur in real time. The website recommends giving your employees access to wearable devices that can automatically receive these security notifications.

This could be as simple as a mobile app with a “virtual panic button,” or in the case of one particular product from Everbridge that IoT World Today cited, a wearable panic button that a nurse could carry at all times, when a smartphone might not be allowed during a shift.

All of these are examples of security infrastructure that integrates both a corporation’s physical headquarters and the employees — on and off site — who need real-time updates to ensure safety protocols are maintained.

Of course, as Fortinet cites, this can only work if all security personnel at a company receive the most stringent training on how to use this technology safely. Cybersecurity breaches occur and physical accidents take place when proper training hasn’t been enforced, when everyone at a company isn’t fully compliant with how to make best use of these security tools.

Keep these points in mind:

• Make the most of smart infrastructure.

• If your company is still relying on methods of the past, please invest in smart building capabilities.

• Ensure everyone on your security staff — and members of the company culture at large — receives training on how to use this technology and keep the firm safe.