Skip to the lesson

Module 4 · Review

Convergence: Surveillance, Insider Threat, and Physical-Cyber Unity

Faraday’s take

Physical and cyber security were run as separate disciplines for decades, and the seam between them is exactly where modern attacks live. A cloned badge is a physical event with a digital signature. A disabled camera is a network intrusion with a physical consequence. The insider who walks a drive out defeats both domains at once. AI infrastructure is critical infrastructure, and its threat surface spans IT, operational technology, physical space, and the supply chain simultaneously. Converge the two programs into one: shared monitoring, correlated events, unified incident response, and a single accountable owner. An adversary sees one target. Your defense must see one picture.

Knowledge check

Why must physical and cyber security be run as a single converged program rather than two separate teams?

Show the answer

Modern attacks cross the boundary between the two: physical access enables digital compromise and network intrusion disables physical controls, while insiders exploit both. Separate teams create a blind seam where correlated events go unnoticed. A converged program shares monitoring, correlates physical and digital signals, and responds as one.