ISC2 Certified in Cybersecurity (CC)Security OperationsEasy
A small business is concerned about unauthorized access to its server room, which houses critical network equipment. The server room has a standard key lock on the door. To improve physical security, the business decides to install a system that requires employees to swipe an ID card and enter a PIN to gain entry. This new system is an example of implementing which security control?
- AChange management
- BAsset management
- CEnvironmental control
- DAccess control
Show answer & explanationAnswer & explanation
Correct answer: D. Access control
The installation of an ID card and PIN system directly controls who can enter a physical space, which is a fundamental aspect of access control.
Why the other options are wrong
- A. Change management governs modifications to systems or processes, not physical security access.
- B. Asset management tracks and inventories assets, not physical entry to a room.
- C. Environmental controls manage conditions like temperature or humidity, not physical entry.
Physical Access Control
Security measures designed to restrict or permit access to physical locations, resources, or assets based on authentication and authorization.
- Uses mechanisms like locks, keycards, biometrics
- Often combines 'something you have' (card) with 'something you know' (PIN)
- Protects against unauthorized physical entry and theft
Memory trick: Physical security protects the 'stuff' in the building.