A security administrator needs an external vendor to correct an urgent issue with an organization's physical access control system (PACS)
The PACS does not currently have internet access because it is running a legacy operation system.
Which of the following methods should the security administrator select the best balances security and efficiency?
Click on the arrows to vote for the correct answer
A. B. C. D.A.
The best method for balancing security and efficiency while allowing an external vendor to correct an urgent issue with an organization's Physical Access Control System (PACS) that is running a legacy operating system without internet access is option C - Set up a VPN concentrator for the vendor and restrict access to the PACS using desktop sharing.
Option A, temporarily permitting outbound internet access for the PACS, is not a secure solution as it can expose the system to potential security threats and compromise the organization's network.
Option B, having the external vendor come onsite to provide access to the PACS directly, is also not the best option as it requires physical access to the system, which can be time-consuming and costly. It may also pose a risk to the physical security of the organization.
Option D, setting up a web conference on the administrator's PC, and then remotely connecting to the PACS, may not be the best option as it can also pose security risks. Remote connections can be vulnerable to unauthorized access and compromise the PACS system.
Option C, setting up a VPN concentrator for the vendor and restricting access to the PACS using desktop sharing, is the best solution. A VPN concentrator provides a secure and encrypted connection between the vendor's system and the organization's network, ensuring that only authorized access is allowed. Desktop sharing enables the vendor to access the PACS system remotely while still restricting their access to the PACS system only, minimizing the risk of unauthorized access.
In summary, while all the options may have their benefits, option C offers the best balance between security and efficiency for the organization, vendor, and the PACS system.