Shared Flashcard Set

Details

CISSP (ElementK) Physical Security
CISSP, Element K 2nd Edition, Lesson 9
30
Computer Science
Professional
11/19/2009

Additional Computer Science Flashcards

 


 

Cards

Term
Physical Security
Definition
  • implementation/practice of control mech. intended to restrict phys. access to facilities
  • devices
  • communication
  • building
  • circuits
Term
Physical Protection Areas (4)
Definition
  • Physical Plant HVAC, Electrical lines, fire detection, lighting, doors, windows, plumbing
  • Computer Facilities server rooms, data centers
  • Data Network network HD/SW, wiring (routers, switch, FW)
  • Personnel electronic/physical attacks against personnel
Term
Physical Threats (4)
Definition
  • Internal physical/logical threats from w/in org.  disgruntled EE
  • External External to org; ext power failure combatted by UPS, battery, generator
  • Natural natural disasters
  • Man-made internal/external; caused by human error/intent
Term
Layered Protection Areas (3)
Definition
  • Perimeter Access 1st layer; fences/gates/instrusion detection
  • Facility Access 2nd layer; locks/doors; limiting access to only authorized personnel
  • Secured Area Access 3rd layer; secured doors/locks/strengthend walls;  limiting access to highly sensitive information/assets
Term
Physical Access Barriers
Definition
  • Fencing
  • Walls
  • Doors
  • Windows
  • Lighting Visibility for guards/cameras; deterrent to intruders - IDS turns on light w/motion detection
Term
Lock Types
Definition
  • Key
  • Deadbolt
  • Keyless keypad/push button
  • Combination safe/vault
  • Device Locks cable locks/port controls; key/keyless
Term
Facility Control Devices (7)
Definition
  • Automatic AC cipher keypads/AC cards open electronically controlled door locks/log access
  • Card Entry Sys Magnetic striped cards/proximity cards
  • Biometric Entry
  • Security Guards
  • Man traps physical entry portal w/2 doors to trap; outer door opens before inner door
  • IDS infrared sensor, sound sensor, motion detectors
  • Alarms/responses
Term
Facility Control System Components (3)
Definition

support information services combo'd w/physical security processes

  • Entry restriction ID/auth
  • Intrustion Detection Unauth access alerts; repeated attempts to door w/incorrect ID/auth
  • Activity Logging activity logs for entry/exits and unusual act
Term
Perimeter IDS Types (7)
Definition
  1. Motion Sensor infrared/microwave
  2. Pressure-sensitive
  3. Heat
  4. Proximity capacitance detector
  5. Vibration broken glass/collision/footsteps
  6. Magnetic keys/coins/metal detector
  7. Photometric change in light level (windowless room)
Term
Surveillance System Types (3)
Definition
  • Video CCTV
  • Security Patrol guards
  • Dogs
  • Audio lithium/digital/concealable/phone transmitters
Term
Physical Access Logs
Definition
  • paper/SW
  • create logs automatically
  • RFID

Log should ID:

  1. Name
  2. Date/time
  3. Access portal/entry point
  4. User ID entered
  5. Location of Access
  6. Unsuccessful Access attempts (unauth hours)
Term
Alarm System Types (6)
Definition
  • lights
  • bells/sirens
  • local activation/response Emergency Doors
  • local activation/remote response security company responds; home security
  • remote activation/local response monitoring done remotely, local responders
  • remote activation/remote response fire detection: fire alarm triggers fire dept
Term
Media Risk
Definition
  • Portability flash drives, other media; easy to move from controlled area;
  • Damage and loss vulnerable to loss and damage

LABEL!

Term
Media Protection Methods
Definition
  • 2man Rule: 2 people to monitor each other based on: nature of info, certain activities occurring, specific systems/media in use
  • Inventory keep track of media to account for it
  • Access Logging who accessed it
  • Encryption protect sensitive info outside of area
  • Media Logging who has it/where did it go
Term
Personnel Controls
Definition
  • Admin controls of personnel background checks, performance review, security clearance
  • Mgt of secured areas areas and people
  • Access based on Need to Know
  • Escort/supervision for exceptions
  • Unintensional Disruptions fire, HVAC
Term
Personal Safety Issues
Definition
  • Primary goal of (ISC)2
  • establish and enforce policies/procedures
Term
Emergency Policy Types (3)
Definition
  • Intrusion Response Policy direction how to respond to intrusion: "In the event of forced entry, notify police"
  • Fire Policy
  • Natural Emergency Policy
Term
Emergency Respond Procedures (6)
Definition
  1. Evacuations
  2. Restricted Building Re-entry prohibiting re-entry after disaster
  3. General Employee Notification notify employees not to come in during disaster
  4. Accounting for Employees head count
  5. Key staff/org notification Press/Fire/Gas & Electric/Emergency Responders
  6. Training/Drills/Exercises
Term
Restricted Work Areas
Definition
  • Access restrictions
  • simple security options: locks, lighting, logs
  • Advanced protection for secured areas: strengthened walls, etc
  • AC & CCTV
  • Restriction on devices
Term
Facilities Design Issues
Definition
  • separate lines to buildings for utils
  • redundant lines
  • backup power supply/generators
  • separate routing for utils/communication
  • adequate HVAC
Term
Facility Protection Categories (3)
Definition
  • Service Entry Points utilities
  • Service Protection backup power/utils/communication
  • Electronic Protection computer/server rooms/telecom systems need HVAC: need to be cooled down because of heat generated by servers; need ventilation; ensure efficiency and reliability
Term
Power Issues
Definition
  • affect sercurity devices
  • affect availability of data/resources: data loss/disruption
Term
Power Problem Types (6)
Definition
  1. blackout power loss
  2. brownout long term low-voltage power (dim lights)
  3. sag momentarily low-voltage
  4. spike short-term high-voltage
  5. surge long-term high-voltage
  6. in-rush surge/spike caused by device started uses great amount of current
Term
Power Protection Systems
Definition
  • UPS
  • Generators
  • Surge/spike protectors
  • Power line monitors
Term
Environmental Controls
Definition
  • HVAC Systems
  • Pipes and drains
  • Lighting

 

Term
Fire Prevention Methods
Definition
  • Fire drill
  • Maintenance of stairs/stairwells
  • Fire Extinguishers
  • Fire Suppresion Syst
Term
Fire Detection Methods
Definition
  • Smoke
  • Heat
  • Flame (optical sensors record radiation)
Term
Handheld Fire Extinguishers
Definition
  • Class levels A B C D K
  • fuel, heat, O2
Term
Water-Based Extinguishers
Definition
  • Wet Pipe water stored and released
  • Dry Pipe water pumped to pipes
  • Preaction heat sensitive sprinklers
  • Deluge high output heat sensitive sprinklers
Term
Fire Suppresion in Computer Facilities
Definition
  • Gas
  • No water

 

Supporting users have an ad free experience!