Here follows a short analogy regarding the importance of getting all your security to work together.
Let us say that a bank is under attack by a gang of thieves that intend to break into its vault and walk away with what’s inside it. Not as sophisticated as getting one of their members to be promoted to a C-level position and then engage in massive securities fraud, but it’ll do for our analogy.
Let us say also that the bank has a security force to deal with each aspect of physical security, but they do not cooperate with each other. The thieves attack in broad daylight, after they’ve had a nice lunch and a nap, so they’re absolutely fresh.
At 1500, the guard watching the video surveillance system notes in his log that ten masked men with weapons entered the bank. He knows this will be something for his team to discuss in their weekly meeting in two days.
At 1501, the guards in charge of the bank lobby note the ten armed men heading towards the vault door. As they are not robbing any tellers in the lobby, the lobby security men do not interact with the men in masks.
At 1503, the guards in charge of the vault door respond to an alert that the door has been blown off its hinges and is laying on the floor of the bank vault. With crack speed, they remove the old door and replace it with a new one. A new guy on the team asks what to do about the ten guys with masks that are empyting out the deposit boxes, but the team lead tells him not to worry, the deposit box guys will handle that: they just need to focus on the door.
At 1505, the guards in charge of the deposit boxes arrive at the vault door, but they cannot enter, as they do not have access.
At 1534, the guards in charge of the deposit boxes note that they can now enter the vault area, as the door has been blown off its hinges. They pass by ten men in masks, each with a weapon and a large bag that seems to be full to capacity. As the men are leaving the vault area, that is not their security concern.
At 1535, the guards in charge of the vault door respond to another alert that a door has been blown off its hinges. It’s a good thing that they always keep two spare vault doors in stock! The team lead prepares the two blown-up doors for an RMA to their manufacturer.
At 1536, the guards in charge of the lobby note the ten men in masks, en route out of the bank front door. Again, they pose no immediate threat to the tellers, so there is no call to engage with them.
At 1538, the guard in charge of the security cameras notes in his log that ten suspicious-looking men in masks with large, full bags, were making their way to their cars in the parking garage. This will be another interesting thing to discuss at the security camera guard team meeting, exactly the sort of thing they should be noting in their logs.
At 1545, the guards in charge of the vault door are wondering what to do with a request for access out of the vault from the security deposit box team. How did they manage to get into the vault without anyone having authorized their entry? The vault door team lead plans to write up the security deposit team for an access violation, as soon as he’s finished with the vault door RMA paperwork.