Introduction to Physical Security

Introduction to Physical Security

The video presents physical security as a CISSP knowledge area built around three types of controls: physical access, technical, and administrative.

Physical Access Controls

Physical access controls restrict entry to specific areas. Examples include:

• Fences and barriers: These may include fences, gates, turnstiles, and mantraps. The video gives these general fence-height guidelines:
  • 3–4 feet: Deter casual intruders.
  • 6–7 feet: Make climbing difficult.
  • 8 feet: Help deter more determined intruders.
• Mantraps: Two-door entry areas that allow one person to pass through at a time. The first door must close before the second can open. Sensors can detect multiple people entering together. Mantraps help control movement and prevent piggybacking, in which an unauthorized person follows someone into a restricted area.
• Security guards: Provide a visible deterrent, operate or support security technology, use human judgment, and may escort visitors to designated areas.
• Guard dogs: Offer a visible deterrent and have acute hearing and smell, but have more limited judgment than human guards.
• Locks: A simple, low-cost way to secure access points. The video identifies preset, programmable, and electronic locks.
• Biometric controls: Use characteristics such as fingerprints, retinas, or voice to identify people. Biometrics are described as “something you are,” an authentication factor.

The video distinguishes these biometric error rates:

• False reject rate (FRR): An authorized person is denied access.
• False accept rate (FAR): An unauthorized person is granted access. The video emphasizes that this is the more serious error.
• Crossover error rate: The point at which the false reject and false accept rates are equal.

Technical Controls

Technical controls include surveillance, alarms, and intrusion detection systems. Closed-circuit television (CCTV) can deter and detect activity, complement security guards, and record events for later review.

Administrative Controls

Administrative controls are the policies and procedures that support physical and technical security. The video says organizations should:

• Secure restricted areas.
• Record people entering and leaving.
• Establish emergency controls.
• Routinely conduct training and fire drills.
• Use pre-employment background investigations and other pre- and post-employment procedures for personnel.

Speakers and Sources

• Speaker: Liz Vonderhayen
• Video/channel source: livogroup (also referred to in the subtitles as lioggroup.com)
• Other speakers: None identified.