CISSP Domain 10 : PHYSICAL SECURITY

.Overview

The Physical Security domain addresses the threats, vulnerabilities, and

countermeasures that can be utilized to physically protect an enterprise's

resources and sensitive information. These resources include people, the

facility in which they work, and the data, equipment, support systems, media,

and supplies they utilize.

The candidate will be expected to know the elements involved in choosing a

secure site, its design and configuration, and the methods for securing the

facility against unauthorized access, theft of equipment and information, and

the environmental and safety measures needed to protect people, the facility,

and its resources.

Key Areas of Knowledge

§ Facility Requirements

§ Restricted Areas/Work Areas

§ Escort Requirements/Visitor Control

§ Fences, Gates, Turnstiles, Mantraps

§ Security Guards/Dogs

§ Badging

§ Keys and Combination Locks

§ Lighting

§ Site Selection, Facility Design, and Configuration

§ Motion Detectors, Sensors, and Alarms

§ CCTV

§ Technical Controls

§ Smart/Dumb Cards

§ Audit Trails/Access Logs

§ Intrusion Detection

§ Biometric Access Controls

§ Environment/Life Safety

§ Power and HVAC Considerations

§ Water Leakage and Flooding

§ Fire Detection and Suppression

§ Natural Disasters

§ Physical security threats

§ Fire and smoke

§ Water (Rising/Falling)

§ Earth Movement (earthquakes, slides, volcanoes)

§ Storms (wind, lightening, rain, snow, sleet, ice)

§ Sabotage/Vandalism

§ Explosion

§ Building Collapse

§ Toxic Materials

§ Utility loss (Power, heating, cooling, air, water)

§ Communications Loss (voice, data)

§ Equipment Failure

§ Personnel Loss (strikes, illness, access, transport)

§ Elements of physical security

§ Threat prevention, detection and suppression

§ Fire (sensors, sprinklers, flooding systems, extinguishers)

§ Water (leakage and flooding)

§ Toxic materials (detection and control)

§ Electrical (UPS and generators)

§ Environmental (location; air temperature, humidity, contamination;

HVAC; water)

§ Public, Private and Restricted Areas (perimeter security, prevention,

detection)

§ Guns, guards, fences and gates

§ Swat teams, armored personnel carriers

§ Guard towers, PIDAS fences

§ Man traps and turnstiles

§ Locks

§ Enclosures, safes, cabling systems

§ Dogs and x-ray equipment

§ CCTV

§ Detectors (motion, heat, laser beam, glass-breakage)

§ Alarms (silent and audio)