Protecting Physical Spaces
Đã giới thiệu| English | Ý nghĩa |
|---|---|
| clean desk policy/kliːn desk ˈpɒlɪsi/ | chính sách bàn làm việc gọn gàng |
| bollards/ˈbɒlɑːdz/ | cột chắn xe |
| card readers/kɑːd ˈriːdəz/ | đầu đọc thẻ |
| access control vestibule/ˈækses kənˈtrəʊl ˈvestɪbjuːl/ | phòng đệm kiểm soát truy cập |
| uninterruptible power supply/ˌʌˌnɪntəˈrʌptɪbl ˈpaʊə səˈplaɪ/ | nguồn điện không gián đoạn |
Managerial controls first
- Security-awareness training teaches staff not to badge strangers in.
- A workstation security policy requires locking devices and a clean desk policy 清桌政策.
- Rules cost little and stop many attacks.
Physical controls harden the building
- Fences, gates, and bollards 防撞柱 deter access; locks protect doors.
- Card readers 读卡器 log and restrict entry.
- An access control vestibule 门禁前室 (a two-door airlock) stops piggybacking.
A dome security camera: physical controls and monitoring protect spaces as well as networks
Managerial control or physical control?
Managerial controls are rules and policies; physical controls are objects that guard the space.
A two-door airlock that lets one person pass at a time is a(n)...
Độ khó 1/5 · 100 xu + một phần thưởng nhỏ cho lần hoàn thành đầu tiên trong ngày
An access control vestibule stops piggybacking.
Which control keeps a device running during a power outage?
Độ khó 1/5 · 100 xu + một phần thưởng nhỏ cho lần hoàn thành đầu tiên trong ngày
A UPS provides backup power.
Disabling ____ ports blocks external drives from loading malware.
Độ khó 1/5 · 100 xu + một phần thưởng nhỏ cho lần hoàn thành đầu tiên trong ngày
Disabling USB ports blocks malware drives.
Which are physical controls? (Choose all)
Độ khó 2/5 · 140 xu + một phần thưởng nhỏ cho lần hoàn thành đầu tiên trong ngày
A password policy is managerial, not physical.
Keeping power on
- Disabling USB ports blocks malware drives.
- An uninterruptible power supply (UPS) 不间断电源 keeps devices running in an outage.
- Match a control's cost to the severity of the risk.
Locks and cameras are useless if staff prop doors open or badge strangers in. Technology only works alongside trained people — that is why security-awareness training comes first.
Security-awareness training is a technical control.
Độ khó 1/5 · 100 xu + một phần thưởng nhỏ cho lần hoàn thành đầu tiên trong ngày
False. Training is a rule or policy for people, so it is a managerial (administrative) control. Technical controls are things like firewalls and encryption.
An access control vestibule has two doors: the first must close and lock before the second opens. Only one person can pass at a time, so an attacker cannot slip in behind an employee — it defeats piggybacking by design.
Protect physical spaces with managerial controls (training, workstation and clean-desk policies) and physical controls (locks, fences, bollards, card readers, access control vestibules, disabled USB ports, a UPS). Prioritise by matching cost to risk severity.