Your Office Has CCTV, Door Access and Security Guards. But Who's Guarding Your Network?
In many offices, nobody in particular. Physical security is easy to see and easy to buy: cameras over the entrance, card readers on the doors, a guard at reception. Network security is invisible, so it is easy to postpone. Yet the network is where the valuable things now sit: customer records, accounts, contracts and the systems that keep the business running. Singapore's Cyber Security Agency detected 284,300 infected systems in Singapore in 2025, up 142% in a year, and its October 2026 health report found almost nine in ten organisations had a cybersecurity incident in 2025. The network has its own equivalents of the lock, the guard and the camera, and a business firewall such as a Fortinet FortiGate provides several of them in one box. At SourceIT, the FortiGate 50G with 3 years of Unified Threat Protection is S$2,847.60, about S$950 a year (listed 30 Oct 2026).
What is the network version of each physical control?
| Physical security | Network equivalent | Typical tool |
|---|---|---|
| Locked front door | Firewall policy that allows only authorised traffic | FortiGate firewall rules |
| Security guard checking bags | Inspection of traffic for exploits, malware and phishing | FortiGate IPS, antivirus, web and DNS filtering |
| Access cards, revoked when staff leave | Individual accounts with MFA, removed at offboarding | Microsoft 365, FortiGate VPN with MFA |
| Visitor badges and escorted areas | A separate guest Wi-Fi network that cannot reach company systems | FortiGate and FortiAP guest SSID, VLANs |
| Separate locked rooms (server room, finance) | Network segmentation between staff, servers, CCTV and printers | VLANs on FortiGate and FortiSwitch |
| CCTV recordings | Logs of who connected to what, kept for an agreed period | FortiGate logs, FortiAnalyzer |
| Alarm monitoring company | Alerts and someone responsible for responding | Email alerts, managed monitoring service |
| Fire safe for documents | Isolated, tested backups | A NAS or cloud backup kept off the main network |
Why does physical security get the budget first?
Three reasons. It is visible to staff, visitors and landlords. It is often required by insurers or building management. And a break-in is easy to imagine. A network intrusion is quiet: an attacker who got in through an unpatched device or a stolen password may stay for days before anyone notices. Mandiant's M-Trends 2026 report put median dwell time in 2025 at about two weeks. CSA's 2023 health report found that among barriers to better security, organisations cited lack of knowledge most often, followed by a belief that they were unlikely to be targeted.
You would not leave the office unlocked overnight because nothing has been stolen yet. The network deserves the same logic.
Is the CCTV itself a risk?
Often, yes. IP cameras, door controllers and smart TVs are computers on your network, frequently with default passwords and old firmware, and they rarely run antivirus. If they share a network with staff PCs and the file server, a compromised camera is a way in. Put them on their own VLAN, block their internet access except where the vendor's service needs it, and keep their firmware current. Our posts Is Your Office CCTV Protecting You or Spying on You? and Your Smart TV Might Know More About Your Office Than You Think go further.
What does guarding the network cost?
Less than many physical security projects. For a small office, the core is a business firewall with security subscriptions, endpoint protection on each PC, MFA on email, and an isolated backup. At SourceIT on 30 Oct 2026:
- FortiGate 30G with 3-year UTP: S$1,956, about S$650 a year.
- FortiGate 50G with 3-year UTP: S$2,847.60, about S$950 a year.
- FortiGate 70G with 3-year UTP: S$4,189.20, about S$1,400 a year, for larger offices with more switches and access points.
- Microsoft Defender for Endpoint P1: S$46 per year as listed.
The price of a breach is covered in A Cyberattack Could Cost More Than Your Entire IT Budget.
Who should actually "guard" it?
Someone has to own the network, even in a ten-person company. That can be an internal IT person, an IT provider on contract, or a managed security service. Their job is to keep the firewall patched and subscribed, review alerts, remove leavers' access, and test backups. If nobody can say who does those four things, that is the first gap to close. CSA's CISO-as-a-Service programme offers eligible SMEs up to 70% co-funding for a consultant-led health check and plan. Housekeeping matters too; see Your Network Cabinet Is a Mess. And That Could Cost You.
Buying in Singapore
SourceIT supplies FortiGate firewalls, FortiSwitch switches and FortiAP access points for a segmented, monitored office network: the FortiGate 30G, 50G and 70G with 1-, 3- or 5-year UTP, the FortiSwitch 108F (S$574.80) and the FortiAP 231K (S$783.60), all with local warranty. Prices listed 30 Oct 2026. Browse the FortiGate firewall collection. For a quotation, use Request for Quotation on the product page, call (65) 6978 3502, email Sales@sourceit.com.sg or use our contact page.
Frequently asked questions
Why is network security as important as physical security? Because most of a company's valuable assets, such as customer data, accounts and contracts, now sit on the network. CSA found almost nine in ten Singapore organisations had a cyber incident in 2025.
What is the network equivalent of a security guard? Traffic inspection: intrusion prevention, antivirus and web and DNS filtering on a next-generation firewall, kept current by a security subscription.
Can CCTV cameras be a cybersecurity risk? Yes. IP cameras are network devices that often have default passwords and old firmware. Put them on a separate network segment and keep their firmware updated.
How much does a business firewall cost per year? At SourceIT on 30 Oct 2026, a FortiGate 50G with 3-year Unified Threat Protection is S$2,847.60, about S$950 a year.
Who should manage a small company's network security? A named person or provider responsible for patching, subscriptions, alerts, leavers' access and backup tests. CSA's CISO-as-a-Service can help eligible SMEs plan this.
