5.1.3. Physical Security and Deception

Physical Controls:

• Badges/Access cards: Control building/room entry
• Biometrics: Fingerprint, facial recognition, iris scan
• Surveillance: Cameras, motion detection
• Locks: Physical key, keypad, smart locks
• Access control vestibule (mantrap): Two interlocking doors—the second opens only after the first closes—so one person passes per authentication, stopping tailgating
• Protected cabling: Run cable through conduit or covered, secured trays where it passes through public areas

Security Through Deception:

• Honeypot: Decoy system designed to attract attackers
• Honeynet: Network of honeypots