CISSP Practice

Physical security describes measures that are designed to deny access to unauthorized personnel (including attackers) from physically accessing a building, facility, resource, or stored information; and guidance on how to design structures to resist potentially hostile acts.

The candidate is e expected to know the elements involved in choosing a secure site, its design and configuration, and the methods for securing the facility against unauthorized access, theft of equipment and information, and the environmental and safety measures needed to protect people, the facility, and its resources.

Key Areas of Knowledge

Understand site and facility design considerations.

Support the implementation and operation of perimeter security (e.g., physical access control and monitoring and audit trails/access logs).

Support the implementation and operation of internal security (e.g., escort requirements/visitor control and keys and locks).

Support the implementation and operation of facilities security such as technology convergence.

1. Communications and server rooms

2. Restricted and work area security

3. Data center security

4. Utilities and heating, ventilation, and air conditioning (HVAC) considerations

5. Water issues such as leakage and flooding

6. Fire prevention, detection, and suppression

Support the protection and securing of equipment.

Understand personnel privacy and safety (e.g., duress, travel, and monitoring).