2.1 - Physical Security for Staff

Question 1

Key fobs

Answer 1

• Small RFID key
  – Add to physical keychain
• Replaces a physical key
  – Commonly used for door locks
  – Proximity operation and contactless

Question 2

Smart cards

Answer 2

• Certificate-based authentication
  – Something you have
  – Usually requires additional factors
• Integrated card reader
  – Built into the laptop
• External reader
  – USB connected

Question 3

Keys

Answer 3

• Some doors may not have an electronic lock
  – Rarely used
  – Standalone locks
  – Safe, storage bin, cabinet
• Use a key cabinet
  – Formal check in/check out
  – Well-defined storage location
  – Allows for auditing and timestamps

Question 4

Biometrics

Answer 4

• Biometric authentication
  – Usually stores a mathematical representation of your
  biometric
  – Your actual fingerprint isn’t usually saved
• Difficult to change
  – You can change your password
  – You can’t change your fingerprint
• Used in very specific situations
  – Not foolproof

Question 5

Biometric factors

Answer 5

• Retina scanner
  – Unique capillary structure in the back of the eye
• Fingerprint scanner - Phones, laptops, door access
• Palmprint scanner - Shape of the hand and fingers

Question 6

Lighting

Answer 6

• More light means more security
  – Attackers avoid the light
  – Easier to see when lit
  – Non IR cameras can see better
• Specialized design
  – Consider overall light levels
  – Lighting angles may be important
  – Facial recognition
  – Avoid shadows and glare

Question 7

Magnetometers

Answer 7

• Passive scanning - Detect metal objects
• Not useful for non-metal objectives
  – Won’t identify ceramic or plastic

Question 8

Mobile Device Management (MDM)

Answer 8

• Manage company-owned and
  user-owned mobile devices
  – BYOD - Bring Your Own Device
• Centralized management of the mobile devices
  – Specialized functionality
• Set policies on apps, data, camera, etc.
  – Control the remote device
  – The entire device or a “partition”
• Manage access control
  – Force screen locks and PINs on
  these single user devices