2.1 – Security Measures - Physical Security

• Access control vestibules are commonly used to control physical access to sensitive areas like data centers.
• Vestibules are small rooms with two or more doors for controlled entry.

Access Control Vestibule Door Control Methods

• All doors remain unlocked until a door is opened, which locks all other doors.

• Badging in unlocks one door, and all other doors remain locked until the first door is locked again.

• Opening a door prevents other doors from being unlocked.

• These methods allow only one person to move through the vestibule at a time.

• Some vestibules involve interaction with a security guard for credential checks before access is granted.

Badge Readers

• Badge readers are a common way to gain access to buildings using magnetic strip or proximity (RFID/NFC) cards.
• Besides building access, badge readers record time or verify security guard patrols.
• Proximity cards use an antenna to receive and transmit signals to the reader, with an RFID chip storing identification data.

Video Surveillance

• Video surveillance systems (CCTV) capture video feeds that can be viewed on a single screen.
• Some cameras now have capabilities which include:
  • License plate recognition using optical character recognition (OCR).
  • Person identification by facial recognition.
• Video feeds are often sent to a central monitoring facility for constant recording or motion-triggered recording.

Alarm Systems

• Alarm systems monitor environmental changes, such as doors or windows being opened.
• Breaking a circuit by opening a door or window triggers an alarm.
• Motion detection can be integrated to trigger alarms when movement is detected in specific areas.
• Duress alarms enable individuals to manually signal emergencies by pressing a button.

Door Locks

• Conventional door locks use a key to lock and unlock the door.
• Deadbolts slide a metal piece between the door and frame for added security.
• Electronic locks use PIN codes or keyless entry (badges).
• Electronic locks can be combined with biometrics (fingerprint, handprint, retina scan).
• Multiple access control methods are often used together for increased security.

Rack Security

• Data centers use locks on racks to protect the equipment inside.
• Racks can be self-contained or connected side-by-side, sometimes with barriers to prevent access between racks.
• Ventilation and cooling are important considerations for enclosed racks.
• Data center racks often have individual locks on each door.

Security Guards

• Security guards can monitor access at reception areas, verifying identification and access permissions.
• They may also check employee badges.
• Visitors typically provide identification and are given guest badges.
• Security guards maintain access lists.

Physical Barriers

• Barricades or bollards control or prevent vehicle access.
• Large planters may be reinforced with concrete to act as barriers.
• Water moats provide a secure perimeter around data centers, with access limited to a guarded entrance.

Fences

• Fences are a visible physical security control.
• Fences can be built in different heights and materials.
• Opaque fences conceal what's inside, while others are see-through.
• High-security fences may include razor wire to prevent climbing.