Physical Security Definition

Download as doc, pdf, or txt
Download as doc, pdf, or txt
You are on page 1of 1

Physical security definition

Physical security is the protection of people, property, and physical assets from
actions and events that could cause damage or loss. Though often overlooked in
favor of cybersecurity, physical security is equally important. And, indeed, it has
grown into a $30 billion industry . All the firewalls in the world can’t help you if an
attacker removes your storage media from the storage room.

[ Learn what you need to know about defending critical infrastructure  . | Get the latest from
CSO by signing up for our newsletters . ]
The growing sophistication of physical security through technologies such as artificial
intelligence (AI) and the internet of things (IoT) means IT and physical security are
becoming more closely connected, and as a result security teams need to be
working together to secure both the physical and digital assets.

Why physical security is important


At its core, physical security is about keeping your facilities, people and assets safe
from real-world threats. It includes physical deterrence, detection of intruders, and
responding to those threats.

While it could be from environmental events, the term is usually applied to keeping
people – whether external actors or potential insider threats – from accessing areas
or assets they shouldn’t. It could be keeping the public at large out of your HQ, on-
site third parties from areas where sensitive work goes on, or your workers from
mission-critical areas such as the server room.

Physical attacks could be breaking into a secure data center, sneaking into restricted
areas of a building, or using terminals they have no business accessing. Attackers
could steal or damage important IT assets such as servers or storage media, gain
access to important terminals for mission critical applications, steal information via
USB, or upload malware onto your systems.

Rigorous controls at the outermost perimeter should be able to keep out external
threats, while internal measures around access should be able to reduce the
likelihood of internal attackers (or at least flag unusual behavior).

One of the most common errors a company makes when approaching physical
security, according to David Kennedy, CEO of penetration testing firm TrustedSec, is
to focus on the front door. “They'll put all of the security in the front door; surveillance
cameras, security guards, badge access, but what they don't focus on is the entire
building of the whole.”

Reference

https://www.csoonline.com/article/3324614/what-is-physical-security-how-to-keep-your-facilities-and-
devices-safe-from-on-site-attackers.html

You might also like