Cbyer Secuirty

Respond to student

…

support your response

…

..100 min.

Physical access controls are important, while most attacks happen over the wire physical security

protects the physical devices and information. With most organizations going to the cloud it is important

to keep in mind the devi

ces that are present. Routers, firewalls, and desktop devices can all be breached

physically installing backdoors, the most important reason for physical security is the employees that are

working in the building. Although it is important to establish and

keep physical security it could be

overwhelming for security teams in budget and resources.

Some challenges that come with physical security is the flow of people going in and out, as well as

manning these areas. Mantraps have to be manned and managed; man

traps are only successful if there

is a person to manage traffic and make sure there is not tailgating happening. When I worked for ADP

there was only one entrance, this entrance had several gates (6 or 7 glass doors with card readers). Only

one person per

glass door was allowed and security personnel was always present to make sure this

policy was implemented, visitors had to sign in and wait for a sponsor to escort them to their

destination.

Another similar example is proximity card readers to enter speci

al areas. This s a great security control

but it has several vulnerabilities such as tailgaters, and one important issue presented by Covington, R. is

off

-

the

-

shelf hardware and software to capture badge data. (2015). He presented an example of an

auditor

that used this technology to ride and follow employees and eventually gathered all the data

needed to access and enter any building. Having a good budget and resources to man and enforce

physical security policies is very important.

Covington, R.(2015).

Physical security: the overlooked domain,

CSO from IDG.

Retrieved from

https://www.csoonline.com/article/2939322/security/physical

-

security

-

the

-

overlooked

-

domain.html

Respond to student …support your response…..100 min.

Physical access controls are important, while most attacks happen over the wire physical security

protects the physical devices and information. With most organizations going to the cloud it is important

to keep in mind the devices that are present. Routers, firewalls, and desktop devices can all be breached

physically installing backdoors, the most important reason for physical security is the employees that are

working in the building. Although it is important to establish and keep physical security it could be

overwhelming for security teams in budget and resources.

Some challenges that come with physical security is the flow of people going in and out, as well as

manning these areas. Mantraps have to be manned and managed; mantraps are only successful if there

is a person to manage traffic and make sure there is not tailgating happening. When I worked for ADP

there was only one entrance, this entrance had several gates (6 or 7 glass doors with card readers). Only

one person per glass door was allowed and security personnel was always present to make sure this

policy was implemented, visitors had to sign in and wait for a sponsor to escort them to their

destination.

Another similar example is proximity card readers to enter special areas. This s a great security control

but it has several vulnerabilities such as tailgaters, and one important issue presented by Covington, R. is

off-the-shelf hardware and software to capture badge data. (2015). He presented an example of an

auditor that used this technology to ride and follow employees and eventually gathered all the data

needed to access and enter any building. Having a good budget and resources to man and enforce

physical security policies is very important.

Covington, R.(2015). Physical security: the overlooked domain, CSO from IDG. Retrieved from

https://www.csoonline.com/article/2939322/security/physical-security-the-overlooked-domain.html