Physical Security

Physical Security, Site Security, and Enterprise Security

Make sure to take notes!

• External Perimeter

• ​Internal Perimeter

• Secure Areas

Access control measures should be used to keep unauthorized persons out of all three areas.

​Three Main Areas

Physical security involves implementing good controls and security practices to secure the site, its surroundings, and the devices inside.

​Site Security

Physical Security

Multiple Select

What are the 3 areas of a site that should be secured when considering physical security? Choose 3.

• External perimeter

• Internal Perimeter

• Secure Areas

• Virtual perimeter

• Secret Areas

Multiple Choice

Access control measures should be used to keep unauthorized persons out of all three areas.

• True

• False

• Fences

• ​Guards

• Gates

• Security Cameras

• Sensors

​Access Control

Includes all entries to the building and the surrounding area.

​External Perimeter

Site Security

Secure Areas are different for every organization but includes rooms that have restricted access such as a locked server room to which only certain people have key.

​Secure Areas

Includes areas just inside the entrances. Controls could include a guard station, cameras, guide rails, swipeable badges, visitor's logs.

​Internal Perimeter

Site Security

​People throw away (Personally Identifiable Informaiton) PII and Data all the time. Shred it before disposal to prevent unauthorized access.

​​Dumpster Diving

​Someone unauthorized sneaks in behind an authorized person without their knowledge. Time for a mantrap!

​​Tailgaiting

​An authorized person knowingly lets a person bypass security measures. Employee training and enforcement is needed.

​​Piggybacking

​Pretending to be a person with proper authorization or credentials.

​​Impersonation

​Common Threats to Site Security

Match

Match the following

• Digging through trash to find personal information that can be used in future attacks

• Closely following an authorized person to gain access to a location without their knowledge.

• A authorized person allows you to follow them into a location you have not been authorized to enter.

• A person disguises themselves to look a authorized person to gain unauthorized access.

• Looking over a person's shoulder without their knowledge while they are on the phone or PC to get personal information.

Dumpster Diving

Tailgaiting

Piggybacking

Impersonaton

Shoulder Surfing

• Dumpster Diving

• Tailgaiting

• Piggybacking

• Impersonaton

• Shoulder Surfing

​Defense in Depth

• Providing multiple layers of security controls

• Having controls at the external perimeter, internal perimeter, and Secure Areas of the building can help deter, prevent, or detect and attack.

• These controls could include door locks, badges, access cards, guard station, log books, and visitor lists. etc.

Multiple Choice

A potential attacker could obtain PII through dumpster diving. What is PII stand for?

• Personally Identifiable Information

• Private Individual Information

• Possibly Incriminating Information

• People Integrity Invitation

Multiple Choice

An authorized person knowingly lets a person bypass security measures.

• Tailgating

• Piggybacking

• Impersonation

• Dumpster Diving

Multiple Choice

At a hospital, a visitor slips into a closet and puts on a white coat and stethoscope around their neck. They attempt to enter an area designated for hospital personnel only. This is an example of ______________.

• Dumpster Diving

• Impersonation

• Tailgaiting

• Piggybacking

Multiple Choice

Someone unauthorized sneaks in behind an authorized person without their knowledge.

• Tailgaiting

• Piggybacking

• Dumpster Diving

• Impersonation

• ​Physical control

• ​Gateway between external perimeter and internal perimeter or between unsecure and secure parts of the building.

• ​Used to capture people who enter the building illegally (i.e. through tailgating)

• ​Person caught in mantrap will need to be released by someone with the proper authority (usually after being questioned.

Mantraps

Multiple Select

Mantraps are designed to prevent what type of threat activities. Pick 2.

• Piggybacking

• Impersonation

• Dumpster Diving

• Tailgaiting

• Phishing

• Secure removable devices like thumb drives, memory card reader, flash drives, portable HDs and SSDs.

• Bitlocker To Go - an app that can encrypt portable drives

​Removable Drives

• Physical locks

• Kensingtion Locks - Used to block the use of USB ports and other peripheral ports

• No external media allowed

• Bitlocker - Encrypt drives

​

​PCs and Laptops

Computer Security

Multiple Choice

This can be used to encrypt portable drives

• Bitlocker to go

• Mobile Crypt

• Moving Shadow

• Cellblock To Go

Mobile Device Security

• Laptops

  • Locking Stations and Security Cables

  • Docking Station

• Mobile Phones

  • Should be Password/Pin Protected

  • Mobile Device Management Software (i.e. MS Intune)

    • Device can be wiped remotely if lost or stolen

Multiple Choice

______________ is an example of Mobile Device Management Software.

• MS Azure

• MS Defender

• MS Intune

• MS Outlook

Antivirus software will usually catch a software based keylogger.

​Security Controls

• Wireless keyboards may be vulnerable to this type of malware

• Can be used to record keystrokes of Usernames/Passwords which can lead to unauthorized access

​Be Aware

Keylogger

Multiple Choice

Wireless keyboards are susceptible to what type of malware?

• Trojan Horse Viruses

• Qwerty Worms

• Keyloggers

• Backdoor Viruses

• DDOS attacks

Administrative Controls

​Examples of Administrative Policies

• Policies

  • Acceptable Use Policy (AUP)

  • Clean Desk Policy (CDP)

• Procedures

  • Incident Response Procedure (IRP)

• Guidelines

​Policies, Procedures and Guidelines designed and enforced to reduce risk.

Administrative Controls

​Mitigate the Human Risk

• Employees are the biggest risk related to the Cybersecurity of an organization.

• Policies, procedures, and guidelines are designed to mitigate human risk.

• Many attacks are designed to take advantage of human error. (i.e. Phishing attack)

• Communication, Training, and Consistent Implementation are ways to reduce human error.

Multiple Choice

Policies, procedures, and guidelines are designed to eliminate human risk

• True

• False

Secure this Space

​What is wrong with this desk?

On the next slide you will see the desk of an employee who is putting his organization at risk. Describe each security risk caused by this employee's desk then on the next slide suggest ways to mitigate the risk (fix the problem).

Open Ended

Describe the security risk marked as #1.

Open Ended

How would you mitigate risk #1.

Open Ended

Describe the security risk marked as #2.

Open Ended

How would you mitigate risk #2.

Open Ended

Describe the security risk marked as #3.

Open Ended

How would you mitigate risk #3.

Open Ended

Describe the security risk marked as #4.

Open Ended

How would you mitigate risk #4.

Open Ended

Describe the security risk marked as #5.

Open Ended

How would you mitigate risk #5.

Open Ended

Describe the security risk marked as #6.

Open Ended

How would you mitigate risk #6.

Open Ended

Describe the security risk marked as #7.

Open Ended

How would you mitigate risk #7.

Open Ended

Describe the security risk marked as #8.

Open Ended

How would you mitigate risk #8?

Open Ended

Describe the security risk marked as #9.

Open Ended

How would you mitigate risk #9?

Open Ended

Describe the security risk marked as #10.

Open Ended

How would you mitigate risk #10?

Intrusion Detection System

​Can detect unauthorized access and alert security personnel.

IDS

Intrusion Prevention System​

Can detect an intrusion like and IDS but can also automatically take steps to prevent further access by attacker.

​​IPS

​Can be used to filter incoming and outcoming traffic by limiting certain ports and protocols

​​Firewall

​Technical Controls

Multiple Choice

Can detect unauthorized access and alert security personnel, but cannot take steps to stop the attacker.

• IDS

• DSI

• Firewall

• IPS

• SPI

Multiple Choice

Can be used to filter incoming and outcoming traffic by limiting certain ports and protocols

• IDS

• DSI

• Firewall

• IPS

• VPN

Multiple Choice

Can detect unauthorized access and alert security personnel, and can also take steps to stop the attacker.

• IDS

• DSI

• Firewall

• IPS

• Sunflower

Open Ended

Describe the main difference between and IDS and an IPS.

Congratulations. You have completed this lesson. Did you take notes?

​

​Lesson Completed!