Your Firewall Can't Hear Radio · Chapter 5
Three Questions Before You Cut a Path
A suspicious connection isn't permission to break the operation.
When a radio-connected device does something strange at night, the instinct is to cut it off. Sometimes that's right. Sometimes it locks a door that needed to open, or silences an alarm that needed to ring. Ask three questions first.
1. What can it reach?
A control screen? The building management system? The access-control server? A vendor outside? The internet? A zone it has no business talking to? The more it can reach, the faster you move.
2. What depends on it?
A door or gate, a camera, an alarm, an elevator phone, a sensor, a controller, an RFID workflow, a remote site, an emergency process? The more that depends on it, the more careful you are.
3. Can we change it safely, right now?
Is this device and this action supported? Who owns the service? Is the device in Observe, Approve or Autonomous mode? What's the way back if something breaks? What has to keep working afterward?
Three modes. Your call.
- Observe. Findavi watches, learns and reports. It changes nothing. Most sites start here.
- Approve. Findavi recommends one specific action, with evidence. A named person says yes or no.
- Autonomous. For narrow situations you approved in advance, Findavi acts on its own, then runs both checks and reports.
A parking-lot camera might run in Autonomous. A badge reader on an emergency exit might stay in Approve for a long time. Both are good answers. You decide, device by device.
The right response is the smallest approved action that closes the risky path and keeps the service running.
TRY THIS
If a badge reader acted strangely tonight, who could approve a response? And who would confirm the door still opens?