L43
Physical security, cameras and geofencing
Cram this first — memory hook
Lock the room, lock the rack, record entry, watch the space.
Exam trap
A camera pointed at an unlocked rack is detective coverage, not a substitute for access restriction.
The slide facts
Physical controls include badge readers, biometric locks, rack locks, cameras and geofencing. Indoor positioning appears alongside Global Positioning System -based location controls.
If you have time — extra
Network security can fail if someone can unplug, reset, steal or connect to equipment directly. A door lock limits entry; a rack lock limits access to equipment; a badge system can control and record access. Cameras help monitoring and investigation but do not themselves lock a door. Closed-Circuit Television () can involve network-connected cameras and recording systems that also require passwords, updates and segmentation. Pan-Tilt-Zoom () cameras can change viewing direction and zoom; fixed cameras observe a fixed view. Geofencing uses a location boundary to trigger a policy/action. Global Positioning System () supports outdoor positioning; an Indoor Positioning System (Intrusion Prevention System ) can use other technologies inside buildings. In this lesson means indoor positioning, not Intrusion Prevention System. Biometric systems also have error rates, enrollment and privacy considerations; they are not infallible.
Walkthrough
Identify who can enter the room, touch the rack, attach a device or alter power/cabling. Apply preventive controls, record/monitor access, and review incidents with both physical and network evidence.