As AV, control, conferencing, digital signage and smart building systems move further onto the network, cybersecurity is no longer only an IT concern. Every connected display, processor, controller, access point and endpoint can become part of the risk surface.
In this expert Q&A, Jeff Sonnleitner, Network Specialist and Information Security Instructor, explains why secure AV systems still depend on reliable wired infrastructure, careful physical-layer design and disciplined network deployment.
The Big Picture: Why Wired Still Matters
Q: Why are we still wiring in 2025 when wireless is everywhere?
Jeff: Even with Wi-Fi 7 and incredible wireless advances, wired infrastructure remains the backbone of any reliable, secure AV installation. Cabling eliminates issues like RF congestion, interference, and fluctuating latency that can sabotage the operation of critical systems. In a boardroom, live event control system, or digital signage network, “best effort” connectivity isn’t good enough; wired delivers deterministic, guaranteed performance.
A wired infrastructure also provides physical isolation – a significant security advantage over wireless networks. Certainly, Wi-Fi encryption has improved, but wireless signals are a shared medium. They extend beyond the building’s physical perimeter, exposing homes and businesses to rogue access points and credential theft. Wired, by contrast, can be completely locked down.
Then there’s bandwidth. Professional AV applications push through enormous amounts of data: uncompressed 4K/8K video, real-time audio over IP, control signals to smart systems. Wi-Fi simply can’t provide the consistent throughput these applications need.
“Wi-Fi is the technology of convenience; wired is the technology of performance.”
– Jeff Sonnleitner
Q: From a cybersecurity standpoint, what are the dangers of relying too heavily on Wi-Fi?
Jeff: The biggest danger is that the air is open territory. Wi-Fi signals extend beyond walls, which exposes a network to threats like rogue access points, “Evil Twin” attacks, and brute-force attempts on passwords. Even strong encryption can’t protect against poorly configured SSIDs or devices that auto-connect to spoofed networks.
Wi-Fi is also vulnerable to interference, both accidental and intentional. Attackers can jam signals or flood channels with traffic to cripple a critical AV system. That’s a cybersecurity threat because it compromises availability – one of the core pillars of the CIA triad (Confidentiality, Integrity, Availability). For this reason, critical AV traffic – control, conferencing, or video distribution – should never depend solely on Wi-Fi. It’s fine for convenience tasks like mobile control or guest access, but not for the backbone operation of a system.
Continue the cybersecurity conversation
For more expert insights from Jeff Sonnleitner, listen to our podcast on the role of wired infrastructure, physical-layer design and secure network thinking in modern AV systems. Listen to Kordz’ cybersecurity podcast episode.
The Physical Layer Is Part of the Security Perimeter
Q: Most people think of cyberattacks as software-based. How can the physical infrastructure itself be a vulnerability?
Jeff: The physical layer is often the forgotten frontier of cybersecurity. If cables are exposed in ceilings or open closets, an attacker can physically tap into the line, bypassing firewalls and encryption entirely. Once tapped, an attacker can intercept, record, or manipulate AV data directly.
Another often-overlooked issue is shielding. Poor quality or improperly installed cabling can leak electromagnetic signals, essentially “broadcasting” the data passing through it. Sophisticated attackers can capture these emissions from outside the building. And of course, unsecured patch panels or wall jacks are an open invitation for tampering. If someone can walk up and plug in a rogue device, they’ve just bypassed your digital defenses.
Cabling, Connectors and Installation Discipline
Q: How can proper cabling, connectors and installation practices help reduce cyber risks?
Jeff: Good cabling isn’t just about performance; it’s about protection. Shielded twisted pair (STP) or fibre prevent both signal leakage and interference. They keep your data from spilling out and prevent others from injecting noise in.
Compliance also matters. Using standards-based, certified cabling and connectors (TIA, ISO/IEC, UL) ensures consistent performance and minimises exploitable weaknesses caused by poor materials or counterfeit products.
And finally, secure installation practices–locked racks, protected conduits, tamper-resistant faceplates–are crucial. If an attacker can’t reach your physical infrastructure, they can’t tamper with it.
Secure Network Design Starts with Segmentation
Q: What should integrators prioritise when building network infrastructure to protect against cyberthreats?
Jeff: Start with segmentation. Keep AV, admin, and guest networks completely separate, ideally on their own VLANs or physical switches. That way, a compromised guest device can’t access your control processor or DSP.
Also, use certified, enterprise-grade components only. Cheap or uncertified cabling and consumer routers are notorious weak points; they lack proper shielding, firmware security, or patch support.
Lastly, don’t overlook the physical path. Secure every cable run, patch panel, and termination point. Treat your cabling as part of your security perimeter.
Best Practices Integrators Cannot Ignore
Q: What are the most vital best practices integrators should follow today?
Jeff: Implement Zero Trust principles wherever possible. Require authentication on every device that joins the network, ideally with 802.1X. Replace all default passwords and use strong, unique credentials. Encrypt everything: Use MACsec for wired connections and TLS or VPNs for data in transit.
Beyond that, monitor your network. Configure logs and alerts so you’ll know immediately if a control processor suddenly tries to reach the internet or communicate outside its VLAN. Combine those IT-layer defenses with physical hardening–locked racks, shielded cables, secure terminations–to build a solid protection barrier.
Common Mistakes: Where Integrators Still Get Caught Out
Q: What are the biggest cybersecurity mistakes integrators still make?
Jeff: The biggest mistake is assuming “security isn’t my job.” In today’s converged environments, every AV device is part of the IT ecosystem. Integrators have to own the security of their installations, not hand it off to the IT department. Over-relying on IT teams is risky. IT may understand general networking, but not AV-specific protocols like Dante or NDI. Security must be a shared responsibility, with integrators protecting the systems they design.
Another mistake is using consumer-grade gear. These products lack enterprise-level security controls and don’t get regular, necessary firmware updates.
Preparing for AI-Driven Cyber Threats
Q: How will cyber threats evolve in AV/IT and how should integrators prepare?
Jeff: We’re entering the age of AI-driven attacks. AI is already being used to automate reconnaissance and exploit vulnerabilities at machine speed. Integrators need to match this level of sophistication with AI-assisted monitoring and automated patch management.
The other major shift is complexity. Every encoder, decoder, and DSP is now an IP endpoint. More devices mean more potential entry points. That’s why segmentation, authentication, and firmware management are more important than ever.
Finally, clients are getting savvier. They’re starting to demand proof of cybersecurity best practices, like password policies, patch schedules, or compliance documentation. Security competence is quickly becoming a differentiator. Integrators who bake security into every design will not only protect their clients; they’ll protect their reputation and business.
Key Takeaways for Integrators
- Wired is the critical backbone: Still the only way to achieve the extreme uptime and dependability and true physical security required of today’s sophisticated AV and control systems.
- Wi-Fi for secondary use only: Use it for convenience, not mission-critical AV systems.
- Security by design: Build cybersecurity into every stage of system deployment, not as an afterthought.
- Segmentation is essential: Isolate AV, admin and guest networks.
- Authentication and encryption: Enforce 802.1X, strong passwords, MACsec, and TLS.
- Physical hardening: Use shielded cables, locked racks and secure terminations.
- Enterprise hardware only: Install certified, supportable and standards-compliant gear.
- Shared responsibility: Integrators must take ownership, not defer to IT.
- Active monitoring: Detect anomalies early, especially as AI-driven threats emerge.
Build from the physical layer up
Secure AV networks depend on more than device settings. Cable selection, pathway design, PoE load, rack discipline and installation quality all influence how reliable, serviceable and controllable the network will be over time. For a practical guide to selecting the right network cable for real project conditions, read Kordz’ Network Cable Selection Guide.
Related Topics
Cybersecurity in AV systems does not start and end with software. These Kordz resources explore the physical infrastructure decisions that support secure, reliable and serviceable connected systems:
Network Cable Selection: Choosing the right network cable is part of building a dependable infrastructure foundation. Cable category, distance, environment, PoE load and long-term service expectations all affect how well the system can support connected AV devices over time.
Shielded vs Unshielded Network Cable: Shielding should be specified for the environment and the complete channel, not as a default security measure. This guide helps integrators understand when shielded cable is appropriate, when unshielded cable is the better fit, and why correct termination and system design matter.
PoE and Network Power: Many connected AV devices now rely on network power. Understanding PoE load, cable construction, voltage drop, heat and bundle density helps integrators design infrastructure that remains stable as more endpoints draw power from the network.
Rack Efficiency and Infrastructure Discipline: Secure, reliable systems depend on more than cable choice. Rack layout, cable density, airflow, access and serviceability all affect long-term system performance and the ability to maintain a controlled infrastructure environment.
Outdoor Network Infrastructure: Outdoor cameras, gates, intercoms, access points and connected devices introduce additional risk through exposure, moisture, surge events and physical access. Correct cable selection and installation method are part of building a more resilient network.
AV over IP Infrastructure: AV over IP increases the number of networked endpoints in a project. As more AV traffic moves across the network, the reliability and control of the wired infrastructure become more important to both performance and security.
Specify the physical layer with confidence
Secure AV systems depend on infrastructure that can be controlled, documented and trusted. Kordz network cabling solutions are designed for professional AV environments where reliability, installation discipline and long-term performance matter.
FAQs
Why is wired infrastructure important for AV cybersecurity?
Wired infrastructure gives integrators more control over the physical network path. Unlike Wi-Fi, the signal does not intentionally extend beyond the building envelope, and access can be limited through locked racks, secured patch panels, protected pathways and controlled termination points. This does not make a wired network automatically secure, but it gives the system a more controlled foundation.
Is Wi-Fi secure enough for AV systems?
Wi-Fi can be suitable for guest access, mobile control and convenience-based devices, provided it is configured properly. It should not be the only backbone for mission-critical AV traffic, control systems, conferencing, digital signage or AV over IP infrastructure. These applications rely on predictable latency, bandwidth and availability, which are more consistently delivered through a properly designed wired network.
What is the physical layer in cybersecurity?
The physical layer refers to the cabling, connectors, patch panels, racks, pathways, wall plates and termination points that form the physical network. If these areas are exposed or poorly controlled, they can create physical entry points into the network. Securing the physical layer means protecting access to the infrastructure, not just protecting the software and devices connected to it.
Can exposed network cables create a cybersecurity risk?
Yes. Exposed or accessible cables can potentially be tapped, disconnected, damaged or used as a pathway for unauthorised access. The risk depends on the site, application and level of access available to third parties. In higher-risk environments, cable pathways, racks, comms cupboards and patching areas should be treated as part of the security perimeter.
Does shielded cable make a network more secure?
Shielded cable can help control electromagnetic interference and may be appropriate where the environment or application requires it. However, shielding should not be treated as a general cybersecurity fix. It must be part of a complete channel, specified correctly, terminated correctly and bonded where required. For many projects, physical access control, pathway protection and correct network design will be more important than shielding alone.
Why is cable quality relevant to cybersecurity?
Poor-quality or uncertified cabling can affect signal integrity, reliability and long-term performance. In a security-sensitive AV network, instability can create availability issues, increase troubleshooting complexity and undermine confidence in the system. Professional-grade cabling, connectors and installation practices help create a predictable infrastructure foundation for secure network design.
How does AV over IP change the cybersecurity conversation?
AV over IP turns displays, encoders, decoders, processors, control systems and other AV devices into network endpoints. Each connected device increases the system’s dependency on reliable network infrastructure and disciplined access control. This makes the physical network, device placement, segmentation strategy and documentation more important than they were in isolated AV systems.
Conclusion
In an era dominated by wireless convenience and AI-driven threats, wired networks remain the critical backbone – the only way to achieve the reliability and physical protection modern AV systems demand. For integrators, building cybersecurity into every stage of deployment isn’t just best practice; it’s a competitive advantage that safeguards clients, projects and reputations alike.
Mitigate cybersecurity risks with Kordz’ extensive range of professional-grade network cables. Designed by integrators for integrators.
© 2026 Kordz International. All Rights Reserved.
Please note, re-publishing of the contents of this article is prohibited; however, Kordz encourages the link to this page to be shared. If media, distributors, educators or others wish to share this information, we request you author your own post or article and link it to this page on kordz.com.