Security of a Facility

Video Activity
Join over 3 million cybersecurity professionals advancing their career
Sign up with
Required fields are marked with an *
or

Already have an account? Sign In »

Time
47 minutes
Difficulty
Beginner
CEU/CPE
1
Video Transcription
00:03
>> Now, the first topic that we're going to talk
00:03
about is we're going to talk about the facility,
00:03
the physical premises itself.
00:03
I know many of us as end-users don't necessarily
00:03
think about that being as part of our jobs.
00:03
We have security guards.
00:03
We have other means of
00:03
>> enforcing security in the building.
00:03
>> But we play a very large part
00:03
because as we come and go from a building,
00:03
we really are the eyes and ears of the company.
00:03
We look for people maybe that shouldn't be there.
00:03
Specifically, if you have swipe card
00:03
access to a building and someone
00:03
doesn't have a swipe card,
00:03
that should immediately trigger
00:03
our attention that maybe something is going on.
00:03
Now again, there are
00:03
many reasons that somebody might have access to
00:03
a building that if
00:03
they don't have a swipe card, that's fine.
00:03
But our job is to make sure we
00:03
escort that person to security.
00:03
We don't allow someone into the building that does
00:03
not have the credentials to enter the building.
00:03
We also have to make sure that we don't just deny
00:03
them entry then go round about our business.
00:03
The idea there is,
00:03
well, I've done my job.
00:03
I've told them they can't come in.
00:03
Not really because that person just going to wait on
00:03
the outside of the facility
00:03
till someone will let them in.
00:03
Now, I'm from North Carolina and trust me,
00:03
we have our only problems in North Carolina,
00:03
but one thing you're trained in North Carolina
00:03
from a very early age is you
00:03
hold the door for people behind you.
00:03
It would be rude not to do so.
00:03
I think what we as security professionals have to
00:03
do is not just tell people what to do and what not to do,
00:03
but help folks understand the right way
00:03
to do something that will help with security.
00:03
Basically what I mean by that is just to tell people,
00:03
don't let someone in the building is
00:03
fine, but what am I going to do?
00:03
Am I going to physically force them out?
00:03
Am I going to slam the door in their face?
00:03
No. The best way that I've found to handle
00:03
this is something along the lines of saying,
00:03
"Look, I notice you don't have
00:03
your badge with you today.
00:03
I want to make sure that you get
00:03
access to everywhere that you need.
00:03
I don't want you to be hassled by security.
00:03
Let me walk you down to
00:03
the security guard and
00:03
let's make sure you get registered.
00:03
Let's get you a badge so that you can be on your way."
00:03
It's something that's very polite,
00:03
it's very friendly here,
00:03
let me help you.
00:03
But basically what I'm saying is I'm accepting
00:03
the responsibility of you being in the building.
00:03
I'm not going to allow you to move any
00:03
further without going through the proper channels.
00:03
That's a really important idea
00:03
because so many times we just turn
00:03
a blind eye on someone entering or even in best cases,
00:03
I've seen people that will refuse entry,
00:03
but then that person just sits around
00:03
outside the door waiting for
00:03
the next person to let them in.
00:03
We really have to be very mindful of that.
00:03
Attacks on the facility.
00:03
Certainly, having access to your building helps me
00:03
tremendously in the realm of data compromise.
00:03
Now I can get access to your network.
00:03
Maybe I can view sensitive information.
00:03
Maybe I can get back to the workstation area and
00:03
find somebody who didn't log off with their system.
00:03
That's a tremendous breach.
00:03
But also don't fit about issues of workplace violence.
00:03
Folks attain access to
00:03
a building that they shouldn't be allowed into,
00:03
and so many terrible things can happen.
00:03
We have to take physical security.
Up Next