IP Case in Point: Complying with Enterprise IT Security Needs

How Fortune 500 power company SCANA leverages IP surveillance

As a result of leveraging existing analog cameras, the established enterprise network IP-based surveillance further reduced costs because no additional manpower was needed to handle the technical aspects of the networked system. SCANA was able to rely on its team of 405-member enterprise IT staff to manage and oversee day-to-day operations.

In addition, SCANA employed software that was compatible to the existing system, which eliminated the need for additional IT staff. The system runs on a SQL-based server with video monitoring software that is Windows-compatible, enabling any IT staff to easily install the software on authorized computers and troubleshoot if problems occur on the network. Because network cameras can run on the same network as enterprise workstations, it is easy for IT staff to maintain and upgrade the system as needed. Cameras, which are connected through Ethernet cables, can be moved and reinstalled in the same manner as they would for a printer or other computer periphery device. In essence, the ability to overlay skilled enterprise IT staff over the infrastructure of a network security system was an added benefit and allowed for ease of maintenance.

“SCANA's security manager, Scott Cleary, saw the value of convergence of Physical and IT systems well before the rest of the industry,” says Mike Taylor, vice president of marketing for Honeywell Building Solutions. “Early adoption of this trend has allowed SCANA to reduce their operating costs while improving their business continuity in times of crisis.”

Protecting customer data

SCANA provides electric service to 620,000 customers throughout South Carolina . Because many of its customers use electronic bill-pay, the company stores personal information such as financial records and bank information in an electronic data center within the Columbia-based headquarters.

There are strict regulations, rules and standards regarding customer payment information that companies like SCANA must follow in order to maintain the consistent processing of payments in a secure and reliable manner. In order to comply with these regulations, SCANA incorporated network cameras into its data center. Any staff person who attempts to access the customer data center must go through an access control system with a badge. Their movements are recorded by network video to ensure that unauthorized persons do not try to enter immediately behind them and gain access to restricted information.

When an employee's badge is waved past the access control system, a tracking system logs an official report and the employee's image is recorded by the network video system and integrated into the incident report. Upon returning to their workspace, the employee receives an e-mail from the tracking system requiring them to respond with the business reason of their visit to the data center. Should an investigation need to be conducted by the Enterprise IT team, network video within an incident report can be used to gain greater insight into the potential security breach.

Enterprise Security

In addition to protecting corporate assets and customer data, SCANA used IP surveillance to protect and monitor employees in the corporate environment. To do this, the company assessed the existing risks to staff and developed a mitigation strategy. It was determined that security cameras within the enterprise environment were “common-sense security” that helped prevent situations like theft and violence. Cameras would further protect the company by providing a video log of employee activity that could be used in a court of law.

Cameras located at SCANA's headquarters were placed in ways that provided both privacy and security to employees. They could be found in all main entrances and exits as well as reception areas. There were 40 cameras throughout the elevator lobbies of the 22-story building. Each lobby had two access-controlled doors with a camera on each one, ensuring staff and outsiders were not entering unauthorized floors. Cameras were also found in stairwells, common areas and in the corporate pharmacy and medical center.