Access Control and Perimeter Protection
Layers and the principle of least access
Access control protects the security-restricted area, the critical parts within it, and the airside/apron boundary. Candidates must understand the layered model: perimeter fencing and detection, gates and doors, credential validation, biometric or PIN verification, and human challenge. The principle is least access: people receive only the access needed for their function, for only as long as needed.
Concepts to understand
Know the elements of a valid access credential, the meaning of colour-coded and zone-based systems, and the difference between identification (who you are) and authorization (where you may go). Understand tailgating, piggybacking and door-propping as the classic human bypasses, and the technologies that detect them. Understand perimeter intrusion detection, patrols, and the requirement to respond to alarms, not merely record them.
Traps in questions
- Accepting a valid credential as sufficient without checking the person and the zone.
- Confusing identification with authorization.
- Assuming technology removes the need for human vigilance; it does not.
- Forgetting that lost or stolen credentials are a security event requiring immediate deactivation.
Worked example
A worker presents a valid card for a zone they are not assigned to. The correct action is to deny entry and report, not to allow entry because the card is genuine. A genuine card in the wrong zone is still an access violation.