No, it does not need to be secured and it can be in an online format. In fact, there are advantages to having it in an online format accessible by all employees: if there is an emergency, a co-worker or line manager can reach out to the emergency contact, without having to go through, say, HR, which could impose an unacceptable delay in some cases.