WEBVTT 00:00.210 --> 00:04.230 There are a lot of physical controls that you're going to be seeing on the exam. 00:04.230 --> 00:07.370 So let's take some time and talk about them now. 00:07.620 --> 00:11.580 Even though there are quite a few different types of physical controls. 00:11.580 --> 00:17.040 Let's take advantage of the fact that we are aware assuming you've been watching other episodes of control 00:17.040 --> 00:19.400 functions and let's break it down that way. 00:19.500 --> 00:22.040 So let's start off with deterrence controls. 00:26.160 --> 00:26.850 A deterrent. 00:26.850 --> 00:35.250 Physical Control is designed to prevent bad guys from trying to actually get in to your physical infrastructure. 00:35.310 --> 00:40.890 So they are things that people can see from the outside that's going to prevent them from even trying. 00:40.890 --> 00:42.540 So the three that I want to talk about. 00:42.540 --> 00:49.020 First of all our lighting as everyone knows a well-lit exterior is going to prevent bad guys from trying 00:49.020 --> 00:50.190 to get in. 00:50.190 --> 00:51.990 Number two is signage. 00:51.990 --> 00:55.170 If you put a good enough sign in it's scary enough. 00:55.170 --> 00:58.680 Hopefully that will deter some of the bad actors as well. 00:58.680 --> 01:03.090 Last and this is a big one and we're going to see this again our security guards. 01:03.090 --> 01:08.760 Nobody wants to have to go into any type of physical perimeter where there's a guy sitting there staring 01:08.760 --> 01:10.980 at you with a badge. 01:10.990 --> 01:17.750 Now deterrent controls are fantastic but when we tend to talk about physical controls we tend to concentrate 01:17.810 --> 01:20.010 on preventative controls. 01:24.070 --> 01:30.760 Probably the most well known famous physical preventative control is a fence. 01:30.760 --> 01:35.280 So things like gates and fences are incredibly important for stopping people. 01:35.290 --> 01:40.510 Now if you really want to stop him you could be using things barricades or big bollards holding up so 01:40.510 --> 01:42.580 that people can't crash through stuff. 01:42.580 --> 01:48.580 Now speaking of crash through stev the United States Department of State came up with something called 01:48.850 --> 01:49.930 K.A. ratings. 01:49.960 --> 01:54.550 Now ratings are superstrong fences that are designed to stop vehicles. 01:54.550 --> 01:57.550 So let me show you a little chart on K ratings. 01:57.580 --> 01:59.930 There are basically four K ratings. 02:00.050 --> 02:02.900 K4 is designed to stop vehicles. 02:02.950 --> 02:05.500 These are all £15000 vehicles by the way. 02:05.530 --> 02:12.820 So K4 stops vehicles traveling 30 miles an hour K-8 stops vehicles traveling up to 40 miles an hour 02:13.090 --> 02:19.500 and k 12 stops vehicles at a whopping 50 miles an hour now. 02:19.690 --> 02:25.990 Great fencing and bollards are important tools for the perimeter but physical preventative controls 02:25.990 --> 02:27.200 don't end there. 02:27.280 --> 02:33.250 For example things have to come in and out of these things so one of the other things we have is a mantrap 02:33.510 --> 02:39.570 a mantrap is nothing more than some type of entry system which consists of two doors. 02:39.580 --> 02:45.850 Somebody comes in they are checked or whatever we do they're actually locked in there for a moment and 02:45.850 --> 02:50.030 then an inner door is opened and they can do whatever they need to do. 02:50.230 --> 02:51.940 Now that's fantastic. 02:51.940 --> 02:54.310 But we don't want to think just in terms of people. 02:54.310 --> 02:58.960 Another big issue that is an important physical control is our cabling systems. 02:58.960 --> 03:03.180 We don't want people to be able to get to our cabling systems. 03:03.190 --> 03:06.650 So traditionally one of the big things we're going to do is an air gap. 03:06.700 --> 03:12.720 We're going to separate important cabling network distribution systems from everybody else. 03:12.730 --> 03:16.090 Now that's not always possible so there's some other options. 03:16.090 --> 03:19.640 So for example VPN can come into play or a VPN. 03:19.640 --> 03:26.620 Now sometimes our cabling distribution systems are so important that we have to physically protect those 03:26.920 --> 03:33.520 so we can actually go through lockdown systems for our cabling systems to prevent bad people from accessing 03:33.520 --> 03:34.020 them. 03:34.030 --> 03:39.310 In fact in larger infrastructures We have complete protected distribution systems. 03:39.310 --> 03:44.800 In this case these cabling systems can actually even go out into the public but we're shielding good 03:44.800 --> 03:46.190 locks and controls. 03:46.300 --> 03:49.440 We can protect those cabling systems in detail. 03:49.480 --> 03:53.230 Now let's continue with our physical preventatives. 03:53.230 --> 03:55.650 But now let's start talking about more. 03:55.690 --> 04:01.360 Inside the system in this case we can do a lot of different things for example if we have important 04:01.360 --> 04:08.590 documents a safe is an amazing preventative control even things like cabinets can be locked enclosures 04:08.680 --> 04:09.850 can be locked. 04:09.850 --> 04:13.340 And while we're talking about things like worried about people. 04:13.420 --> 04:19.840 Also consider that sometimes we can have radio frequency or EMI come in in terms of problems. 04:19.870 --> 04:25.510 So things like Thiaridae cajas can be used to protect sensitive electronic equipment. 04:25.960 --> 04:32.440 Now once we get this far down in the system we start to talk in terms of individual people and what 04:32.440 --> 04:33.370 they can do. 04:33.550 --> 04:40.540 So the big word here is Lockes we use locks all the time and we could have retinal scanners or cards 04:40.540 --> 04:44.920 or even physical good old style keys whatever you choose to use. 04:44.950 --> 04:51.040 These are fine things but it's absolutely incredibly important that you have some form of key management 04:51.040 --> 04:52.770 system to control this. 04:52.960 --> 04:59.350 In large organizations you have security people whose only job is to keep track of where all the keys 04:59.350 --> 05:01.760 were all the cards whatever it might be. 05:01.960 --> 05:08.200 And literally having some type of inventory system that keeps track of where all the keys are at any 05:08.200 --> 05:12.100 given moment or at least who is in possession of them is absolutely critical. 05:13.270 --> 05:17.370 Now once you get down to your individual workstation there's only two big things to consider. 05:17.560 --> 05:19.430 Number one are cable locks. 05:19.450 --> 05:23.140 It's fairly easy for bad guys to physically grab cable. 05:23.150 --> 05:28.630 Now granted you've got bollards and fencing and security guards and cameras and signage and safes and 05:28.630 --> 05:29.220 all that. 05:29.350 --> 05:32.310 But even in-house people can grab stuff. 05:32.320 --> 05:34.620 So cable locks are something to consider. 05:34.780 --> 05:37.050 Last are screen filters. 05:37.120 --> 05:43.690 Keep in mind that just being able to see the type of data that's up on people's screens can be a serious 05:43.690 --> 05:45.480 intrusion into your security. 05:45.490 --> 05:49.720 So simply isn't a screen filter can often be a very very powerful tool. 05:50.140 --> 05:52.490 Now that is a lot of preventative tools. 05:52.510 --> 05:56.560 And those are probably most of the stuff you're going to be seeing on the exam. 05:56.560 --> 06:00.000 But there is one more let's talk about Detective tools. 06:04.110 --> 06:09.590 A good detective control is going to well detect that something naughty is taking place. 06:09.590 --> 06:13.510 So probably the first one and the big one that comes to mind are alarms. 06:13.520 --> 06:18.770 Now keep in mind we're talking about physical controls here so we're talking about real alarm systems. 06:18.860 --> 06:21.190 Now what does a good alarm system going to have. 06:21.200 --> 06:27.470 Well it could have things like cameras for example that are noticing that something's happening so we 06:27.470 --> 06:30.090 might have motion detectors associated with those. 06:30.170 --> 06:35.830 We could have infrared detectors so you could really get James Bondy about this if you want. 06:35.900 --> 06:42.250 But the important thing is that they are detecting that something bad is happening in the physical world. 06:42.260 --> 06:45.420 Now the other one that's important are log files. 06:45.470 --> 06:52.180 We don't necessarily always have the ability to instantly recognize that things have taken place. 06:52.310 --> 06:58.730 So long files can be incredibly important in terms of tracking and letting people at least be aware 06:58.730 --> 07:05.170 of that certain types of attacks have taken place so very very important. 07:05.190 --> 07:08.890 Now the last ones I want to cover I'm going to kind of knock these out real quick. 07:08.960 --> 07:16.970 Are compensating and corrective controls so they're not really heavily an issue when it comes to physical 07:16.970 --> 07:18.240 security controls. 07:18.260 --> 07:22.700 They can be really important for technical and administrative controls but in the physical world you 07:22.700 --> 07:27.920 almost have to fight to come up with a situation to fit underneath these like for example you could 07:27.920 --> 07:35.840 argue that the bad guys have punched a hole in a fence and you can't fix that control right now because 07:35.840 --> 07:40.970 you can't get the fence fixed so you get an extra security guard to give him a chair and a light and 07:40.970 --> 07:42.710 you have him sit there right in front of the whole. 07:42.710 --> 07:46.100 So that would be one example of a compensating control. 07:46.100 --> 07:52.240 So really when we're talking about physical controls concentrate on the first three that we talked about. 07:52.460 --> 07:57.380 Now the last thing I want to mention is that you've got to be careful with physical controls. 07:57.380 --> 08:06.740 A lot of physical controls could meet different areas for example is a camera a preventative control 08:07.250 --> 08:09.600 or is it a detective control. 08:09.620 --> 08:12.110 Well you could argue both ways. 08:12.110 --> 08:18.980 What I will tell you on the exam is that when you run into questions like this it will not make it hard 08:18.980 --> 08:21.320 for you to figure out which direction they want to go. 08:21.380 --> 08:24.160 Take your time read the questions you'll be just fine.