Cyberstudy
PDF p.206 In progress

Physical Security Controls

Open PDF at p.206 23 flashcards

Summary

PDF p.206

Physical security is essential for cybersecurity operations, providing the first line of defense against unauthorized physical access to critical assets. It involves securing physical components like servers, datacenters, and infrastructure through access control mechanisms, surveillance systems, and environmental controls.

In plain words

Supplementary — not from your PDF

Physical security is the first line of defense. Anyone who can touch a server can bypass many digital controls. It uses access control (badges, biometrics, fobs), surveillance (cameras, motion sensors, alarms) and environmental controls (backup power, cooling, fire suppression). Physical access follows the same AAA idea: authenticate people, authorize them through defined entry points, and account for every entry. Zones become more restrictive the further in you go.

Detailed explanation

PDF p.206
  • Importance of Physical Security
    • First Line of Defense: Protects against unauthorized physical access.
    • Components: Servers, datacenters, critical infrastructure.
  • Examples of Physical Security Measures
    • Access Control Mechanisms
      • Biometric Scanners: Fingerprint, facial recognition.
      • Smart Cards: Electronic access cards.
      • Key Fobs: Physical tokens for access.
    • Surveillance Systems
      • Video Cameras: Monitor and record activity.
      • Motion Sensors: Detect movement.
      • Alarms: Alert to unauthorized access.
    • Environmental Controls
      • Backup Power: Ensure continuous operation.
      • Redundant Cooling: Prevent overheating.
      • Fire Suppression Systems: Protect against fire damage.
  • Access Control Fundamentals
    • Authentication: Identifies approved persons through access lists and mechanisms.
    • Authorization: Controls access through defined entry and exit points.
    • Accounting: Records usage of entry/exit points and detects breaches.
  • Zone Implementation
    • Definition: Physical security often uses zones separated by barriers.
    • Security Mechanisms: Control entry and exit points.
    • Restrictive Progression: Each zone becomes increasingly restrictive.

Important terms

taken from the text above
First Line of Defense
Protects against unauthorized physical access.
Biometric Scanners
Fingerprint, facial recognition.
Smart Cards
Electronic access cards.
Key Fobs
Physical tokens for access.
Video Cameras
Monitor and record activity.
Motion Sensors
Detect movement.
Alarms
Alert to unauthorized access.
Backup Power
Ensure continuous operation.
Redundant Cooling
Prevent overheating.
Fire Suppression Systems
Protect against fire damage.
Authentication
Identifies approved persons through access lists and mechanisms.
Authorization
Controls access through defined entry and exit points.
Accounting
Records usage of entry/exit points and detects breaches.
Zone Implementation
Physical security often uses zones separated by barriers.
Security Mechanisms
Control entry and exit points.
Restrictive Progression
Each zone becomes increasingly restrictive.

Examples & real-world scenarios

Supplementary — not from your PDF
  • Badge access to the office, then biometrics for the server room.
  • Cameras on every datacenter entrance.
  • Fire suppression in the equipment room.

Scenario

A visitor walks into an unlocked comms room and plugs a device into a switch. Zoned physical access with logged entry points would have stopped or at least recorded this.

Common mistakes

Supplementary — not from your PDF
  • Focusing only on cyber controls and leaving server rooms unlocked.
  • Forgetting accounting: logging who used each entry point.

Practical skills

Supplementary — not from your PDF
  • Draw physical security zones for a small office.

What I should remember

Key Points PDF p.206
  • Importance of Physical Security
    • Defense: Against unauthorized access.
    • Components: Servers, datacenters, infrastructure.
  • Examples of Measures
    • Access Control: Biometric scanners, smart cards, key fobs.
    • Surveillance: Video cameras, motion sensors, alarms.
    • Environmental Controls: Backup power, cooling, fire suppression.
  • Access Control Fundamentals
    • Authentication: Access lists, mechanisms.
    • Authorization: Barriers, entry/exit points.
    • Accounting: Records, breach detection.
  • Zone Implementation
    • Zones: Separated by barriers.
    • Mechanisms: Control entry/exit.
    • Restrictive: Increasingly restrictive zones.