01 - Flash Cards
Secure Facility Plan
- Security plan that addresses all the security needs of an organization and outlines all the security mechanisms
Critical Path Analysis
- It is a systematic method for scheduling a set of project activities and required resources.
Site Selection
- Site selection is to be done in accordance to organization’s security needs.
Facility Design
- Facility is to be designed in accordance with the organization’s security needs.
List Administrative Physical Security Controls
- Facility construction, selection, site management, personnel control and security training.
List Functional Order of Controls
- Deterrence
- Denial
- Detection
- Delay
Equipment Failures
- Equipment failure is inevitable so mean time to fail and mean time to repair are always to be included in security planning.
Wiring Closet
- It is usually small room commonly found in institutional buildings/companies where all network cables are located.
List Elements of a Cable Plant
- Entrance facility
- Equipment room
- Backbone distribution system
- Telecommunications room
- Horizontal distribution system
Server Rooms/Data Centers
- Protected rooms where critical servers and network devices are stored.
List Some Technical Physical Security Controls
- Smartcards
- Memory Cards
- Proximity Readers
- Intrusion Detection Systems
Smartcards
- ID badges/security passes with an embedded magnetic strip or a chip.
Memory Cards
- Readable cards with a magnetic strip that retain a small amount of data.
Proximity Readers
- Passive device/card worn by an authorized user which can be read without inserting it into a reader device.
Intrusion Detection Systems
- Systems aimed at detecting unauthorized access such as bodyguards, burglar alarms etc.
Access Abuses
- Can happen at every security layer if there are oversights.
Emanation Security
- Physical restrictions used to prevent data from being compromised through signals emanated by a system like electromagnetic radiation.
Faraday Cage
- In the context of security it refers to a type of a room or a building covered by a metal shield in order to protect it from electromagnetic radiation.
White Noise
- In terms of security white noise is defined as emitting false traffic in order to mask the presence of real signal.
Control Zone
- Implementation of Faraday’s cage,white noise or their combination in order to protect a particular area.
Media Storage Facilities
- Evidence Storage
- In today’s world of cybercrime is is critical to maintain records of all logs and activity.
UPS
- Uninterruptible power supply, a type of rechargeable battery used for sensitive devices in case of power outage.
Blackout vs Fault
- Total loss of power vs transient loss of power
Surge vs Spike
- Prolonged high voltage vs momentary high voltage
Device Noise
- Noise generated by electronic equipment can interfere with the quality of transmission dependent on electromagnetic radiation.
List Two Types of Electromagnetic Interference
- Common mode noise
- Transverse mode noise
Water Issues
- Leakages and floods can cause major damage to a facility and data security and have to carefully considered in environmental safety policy outline.
List Four Primary Stages of Fire
- Incipient
- Smoke
- Fume
- Heat
Fire Detection System
- Fixed temperature detection
- Rate of rise detection
- Flame actuated systems
- Smoke-actuated systems
Water Suppression Systems
- Wet pipe system
- Dry pipe system
- Deluge system
- Preaction system
List Some Perimeter Security Controls
- Fences, gates,mantraps
- Lighting
- Security guards and dogs
List Types of Motion Detectors
- Intrusion Alarms
- Deterrent Alarms
- Notification Alarms
- Local Alarm System
List Internal Security Controls
- Keys and locks
- Badges
- Motion detectors
List Different Types of Motion Detectors
- Infrared
- Heatbased
- Wavepatterns
- Capacitance
- Photoelectric
- Passive audio motion detector
Intrusion Alarms
- Alarm system designed to detect unauthorized entry/access into a building or other area.
Deterrent Alarms
- Alarm systems that engage additional security once triggered.
Repeller Alarms
- Alarm system that engages a siren or lights once triggered.
Notification Alarms
- Alarm systems that do not warn the attacker but rather send a notification of activity to a guard or the police.
Local Alarm System
- Alarm systems that send an audible sound in the radius of 400 feet.
Central Station System
- Alarm system that is silent locally but notifies monitoring agencies of an attack.
Auxiliary Station
- Alarm systems that notify fire, police and medical service once attack occurs.
Regulatory Requirements
- Set of restrictions implemented onto an organization by standard of industry or a legal entity.
Static Electricity
- In a setting of low humidity, even non static carpet can lead to electric discharge that may destroy electric equipment.
List Three Categories of Controls Enabling Physical Security
- Administrative - site selection, personnel controls…
- Technical - access control, CCTB…
- Physical- alarm, guards…