Episode 47 — A.7.1–7.2 — Perimeters; Physical entry
Show notes
A.7.1 requires defining physical security perimeters that protect areas containing critical information assets and supporting infrastructure. For the exam, note the layered defense model: public zones, reception areas, controlled office space, and restricted rooms such as data centers or network closets. Each zone carries different controls—barriers, signage, surveillance, and entry validation—scaled by risk and classification. The objective is to separate sensitive operations from general access and to create detectable, delay-inducing layers that give response teams time to act. Candidates should connect perimeters to documented site plans, asset placement, environmental controls, and business continuity dependencies to show that facility design supports confidentiality, integrity, and availability requirements.
A.7.2 builds on this by governing physical entry controls that authenticate and authorize people entering protected zones. Implementations may include staffed reception, visitor management with government ID verification, badge readers, biometrics, anti-tailgating turnstiles, and escorts for guests. Evidence should demonstrate enrollment processes, badge lifecycle management, and periodic access reviews aligned with HR events and role changes. Common pitfalls include shared visitor badges, propped-open doors, and mismatches between access lists and actual job needs. Effective programs pair physical logs with CCTV time stamps, monitor door-forced and door-held alarms, and conduct random audits to validate escorting and clean-desk adherence near perimeters. Candidates should explain how physical entry data integrates with incident response, how exceptions are documented and time-boxed, and how seasonal surges—contractors, deliveries, or peak hours—are addressed with staffing and queue management to prevent security theater and maintain real deterrence. Produced by BareMetalCyber.com, where you’ll find more cyber audio courses, books, and information to strengthen your educational path. Also, if you want to stay up to date with the latest news, visit DailyCyber.News for a newsletter you can use, and a daily podcast you can commute with.