You might think banks, art galleries and penthouses are secure. But until you have your first infant, likely you never thought about hospital security much. At least that was me a week ago.
Please be aware: The experiences in this post are purely subjective – if there are corrections we can make to the post, please get in touch with us.
NICU (Neonatal Intensive Care Unit) security experience
Generally it was amazing how efficiently simple low tech equipment is being used to create a secure environment in hospitals. For example the use of a 1 button voice neck wearables that every nurse interacted with instead of handhelds.
However due to the chaotic nature of hospitals there was naturally plenty of opportunity for social penetration testing, below some experiences:
Shortly past midnight I entered the NICU (Neonatal Intensive Care Unit) of Mount Sinai Hospital in Manhattan after parking the car. My wife was already past NICU security at that time.
NICU security started in the lobby
First thing I noticed: The lobby security post wasn’t occupied. Later I learned that security guard also has to help people get to the right floor if they can’t really walk. During that time his security alert dashboard stays unmanned. It would be easy to check off a few alarms on the NICU security dashboard to not create awareness of an unwanted intrusion (in that case me).
Elevator and device security
Going up in the elevator to the real NICU security desk the next thing I noticed were the big radio frequency boxes over each exit of the elevator. Later I learned that each large item (such as beds or babies) are tagged. That means if they are being pushed or taken into the elevator the NICU security system notices that and marks them as “left floor”. Very useful as long as the tags are in the right place, but more to that point later.
Admission to NICU unit
Standing confused in front of the NICU security desk got the guard on duty to ask me “are you the parent?”. A simple “yes” answer got me in the otherwise closed off baby delivery section. Doctors and nurses need badges to get in there. I just said “yes”. Bingo.
Voice-controlled smart device as security feature
Passing by the first nurse made me aware that they all communicate through a kind of “in-house” Siri system. Basically a 1 button wearable device they have tied around their neck. When pressing the button they can give voice commands like “call Doctor Jim” and the system checks if the doctor is available and if yes, connects them directly. Sort of like a smart, mesh networked walkie-talkie. Pretty cool.
Infant security bracelets
The most astonishing NICU security feature for infants was the security bracelets. Once the baby is born, the baby and BOTH parents are being tagged with a barcode printed on a security bracelet. However in most cases the barcode isn’t used and the NICU security staff just asks “can you please read your number to see if it matches the babies’?”. There is no check if I’m the real owner of the number, if I have the number from someone else.
What’s next for NICU security?
Anyways, going through NICU security was a great experience for anyone working in the security industry. There are so many areas of opportunity for innovation in this area, even the use of smartphones as on-demand access credential might be an easy fix to start with.
Phone-based systems are not just a small-business solution. CEO of Kisi, Bernhard Mehl, comments: “If you see the average of three doors connected then that might seem low but, in reality, one door relates to around 50 employees—so those are locations with about 150 people on average, including satellite offices. That’s quite significant.”
Mobile Access Control Adoption by Industry
Kisi examined which industries are investing the most in mobile access control technology. To do so, the average size of mobile access control installation projects by industry were measured. Commercial real estate topped the list with 23.5 doors running mobile access per facility. Education management came in last with 1.0 door running mobile access per facility.
The number of shooting incidents at K-12 schools, according to the CHDS, reached an all-time high at 97 incidents in 2018—compared to 44 in 2017. Cloud-based access control companies, like Kisi, offer a lockdown feature for active shooter situations or emergencies, making it an effective protective layer for places that are targeted, such as religious institutions, which come in near the top of the list with 4.0 doors running mobile access per facility.
Based on industry size, it makes sense that commercial real estate tops the list, with 23.5 doors running mobile access per facility. Cloud-based access control enables these larger organizations to scale more seamlessly and allows large organizations, like telecommunications, to deploy the most manageable IT solutions available, eliminating the need to create and manage a business’s own IT infrastructure over time.
“Commercial real estate is, of course, the driver of mobile adoption since they have the largest buildings,” Mehl adds. “The key here is to show that mobile-first technologies are not a risk but an innovation that brings positive ROI and allows agencies to reposition their buildings as forward-thinking establishments.”
The scalabelilty and ease of use in onboarding an organization allows many different types of industries and businesses of different sizes to adapt a cloud-based access control system, either using keycard or mobile credentials for access.
Mobile Access Control by State
Looking specifically at the United States, Kisi analyzed in which states companies are investing the most into upgrading to smartphone-enabled access systems. Of the currently installed base of access control readers, around 20 percent will be mobile capable by 2022, according to a recent IHS report. Cloud-based systems, like Kisi, are future-proof—allowing over-the-air updates in real time and unlimited scalability for users.
“Mobile unlock technology makes you think of the major tech hubs like New York, San Francisco or Los Angeles,” Mehl adds. “Looking at which states have the largest projects, it’s surprising and refreshing that those are not the typical ‘tech cities, and yet that’s where access control technology really makes an impact.” The fact that the largest projects are seen in states outside of the typical tech startup landscape is evidence that mobile access control is highly applicable across industry sectors.
For further questions about this study, reach out to Kait Hobson (firstname.lastname@example.org)