Episode 3: Boring Habits that Fix Scary Risks

The biggest wins in security are rarely exciting, no one ever got a trophy for keeping an asset register updated. But those boring habits are the reason nothing explodes at 2am.

In this episode, Tim and Kaz walk through the unglamorous routines that stop small issues turning into big incidents. The goal? Making attackers bored and building managers happy. No heroics required.

What we cover:

• Why most physical security failures aren't clever attacks — they're familiar IT problems attached to the doors
• The habit that underpins everything: a living asset list of what you actually have
• Locking down who can log in — named accounts, single sign-on, and MFA on privileged actions
• Patching as a calendar activity, not a 2am emergency — plus segmenting security devices onto their own network
• Taming vendor and staff remote access (the "just for five minutes" that lives on forever)
• Tested backups and one-page runbooks, so a bad day doesn't become a disaster
• A lightweight twice-a-year health check — plus two things you can do this week

Resources:

This episode is part of a six-part blog series on physical security for IT leaders. Read the companion post here.

Hosts:

Tim Orr, South Island Sales Manager, Gallagher Security

Kaz Cairns, South Island Channel Manager, Gallagher Security

Music (Intro, Transition, Outro):

Original soundtrack by Tim Hunt

Instagram: @timofthehunt