When you think of cybersecurity, it’s easy to get caught up in the sleek, digital landscape of firewalls, encryption, and the quiet hum of data centers. Yet, there is an equally vital side to security that’s often overlooked—the physical reality in which we live, work, and connect. Walk through the heart of any thriving city—whether it’s the tech-savvy downtown of Salt Lake or the up-and-coming neighborhoods of Sugar House—and you’ll see it: life in motion. But beneath this motion is something you might not notice: the invisible threads binding the digital and physical worlds together, making security everyone’s concern.
But here’s the problem: as cities become comfortable in their rhythm, they often become complacent in their security posture. We see it in the way employees tailgate through secure doors without a second thought, the laptops left unattended on café tables, or the endless delivery trucks unloading into buildings with barely a glance from a security guard. It’s the “it-can’t-happen-here” mentality that keeps cities sleepy, and it’s a vulnerability that must be addressed.
Waking Up the City to Security Realities
It’s time to wake up. The intersection of cybersecurity and physical security is no longer a topic confined to IT departments or security firms—it’s a concern that impacts every business, every building, and every individual. And the biggest risk to any city is to assume these breaches are only hypothetical. Cyber-attacks often start with a simple physical intrusion, proving that even the most sophisticated digital defenses can be undone by the failure to lock a door or inspect a visitor’s badge.
This is where penetration testing enters the picture, and I’m not talking about shadowy hackers hunched over keyboards in dark rooms. Penetration in physical security is a real-world exercise—a subtle, but critical, way to test the resilience of our everyday defenses. It’s the art of looking at a city or company’s physical landscape and finding out where the gaps lie, quietly exploring weak spots before a real attacker can exploit them.
You might ask: why does this matter to a thriving city like Salt Lake? Because cities aren’t just geographical spaces; they’re ecosystems of interconnected businesses, critical infrastructure, and communities. And if we don’t start thinking about security in a holistic way—connecting the dots between cybersecurity and physical protection—we risk leaving our cities exposed. Imagine a situation where an innocent-looking visitor gains access to a high-rise office under the pretense of a lost badge, or a rogue delivery gaining entry into a building’s restricted area. In an instant, a physical intrusion has opened the door to digital chaos.
The Quiet Neighbor and the Silent Vigilance
Let’s add a different angle to this. Imagine a quiet neighbor, someone like Whitney Pettrey, who moves in next door. To the community, she might appear as an ordinary newcomer, just another person blending into the neighborhood fabric. But what you don’t see is the role she plays as a physical-cyber penetration tester. Her presence is part of a larger effort to quietly “wake up the city,” testing its defenses without disrupting its day-to-day flow. She’s the type who might walk into a public space, notice an open door or unsecured access point, and silently note these vulnerabilities—not to exploit them, but to build up the city’s resilience.
She doesn’t wear a badge announcing her role; she doesn’t carry equipment that draws attention. She’s the observer, the tester, the guardian who understands that physical security drills aren’t about raising alarms, but about making sure the alarms never need to sound in the first place. In these small, unnoticed moments, she contributes to building a culture of awareness that is vital to keeping the city safe.
Imagine waking up one morning and realizing that this unassuming neighbor next door has, in her own discreet way, been actively making your community more secure. She’s not just a techie with a penchant for digital security; she’s part of a critical exercise to see how alert the city is, how prepared its businesses and residents are, and how tightly its defenses are woven.
The Quiet Drills That Make All the Difference
What we need is a change in mindset—a subtle shift that begins with the way we approach routine, daily security. The idea isn’t to incite panic or drill fear into citizens; it’s to establish a culture of vigilance. Think of security drills, but not the kind with blaring alarms and evacuation orders. Instead, these are quiet, calculated, and discreet. Picture security officers periodically testing door locks and access points, assessing staff reactions to unknown visitors, or staging scenarios to see how long it takes for a suspicious package to be reported. These “awareness drills” are designed to keep everyone on their toes without disrupting daily life—because security doesn’t always have to be loud to be effective.
It’s a paradox: the most successful security exercises often go unnoticed. They blend into the fabric of the city, reminding businesses and employees alike that they are part of a larger safety net. Every action matters, from the receptionist double-checking visitor badges to employees locking away sensitive documents before stepping out for lunch.
The Urgent Need for Cyber-Physical Security Professionals
However, the most critical component of a secure city is its people. The demand for cybersecurity and physical security professionals is growing at an exponential rate, and our cities depend on this talent to anticipate, detect, and neutralize threats. Yet there’s a significant gap—both in numbers and in expertise. And it’s not just about hiring more people; it’s about training individuals to understand the convergence of physical and digital security.
Think of it this way: cybersecurity isn’t just about firewalls or software updates, and physical security isn’t just about locks and guards. A robust security professional needs to see the whole picture—how a simple act like opening an unguarded side door can lead to a larger cyber threat. This dual awareness is vital, particularly as threats continue to grow in sophistication. If cities don’t actively train and hire professionals who can move seamlessly between these domains, they risk being unprepared for a major attack, be it from criminal syndicates, rogue insiders, or even rival nation-states.
The clock is ticking, and the need for an interconnected security culture is only becoming more urgent. A city that understands the dance between cyber and physical security can protect itself better, move faster, and adapt more effectively to emerging threats.
Creating a Culture of Everyday Security
Building a cyber-resilient city starts at the individual level. It starts with businesses recognizing that cybersecurity isn’t just an IT issue—it’s a company-wide responsibility. It means communities being aware of what’s happening around them, and citizens understanding their role in keeping their neighborhoods safe. In practice, this could be as simple as never letting someone piggyback on your access badge, questioning unexpected visitors, and being mindful of the small actions that add up to big security breaches.
It’s also about fostering a culture where asking security questions is encouraged and responding to incidents quickly becomes second nature. Imagine walking down the street and knowing that the businesses around you have security protocols in place, that the police are equipped to respond to both physical and cyber incidents, and that your own awareness is part of the city’s overall defense.
Connecting the Dots Between the Physical and the Digital
At the end of the day, waking up a city isn’t about creating chaos—it’s about creating resilience. Resilience comes from preparation, from training, and from having the right people on the ground who know how to connect the dots between the physical and digital realms. When companies and cities work together to understand their vulnerabilities, they can turn them into strengths, reinforcing the bonds that protect businesses, communities, and the entire ecosystem.
Our cities need to be ready for what’s next, and that means thinking holistically about security. Whether you’re a local business owner, a tech enthusiast, or simply someone who calls Salt Lake home, the path to a more secure future starts with awareness, vigilance, and a commitment to keeping our digital and physical worlds safe.
To learn more about how we can build cyber-resilient cities and to find out how you can be part of the solution, visit whitneypettrey.com. Together, let’s wake up our cities, our states, and our country and strengthen its defenses—one small, intentional city at a time.
