Physical Security, Access Control and Perimeter Protection
What the exam tests
Physical security, access control and perimeter protection-the layered defence that keeps unauthorised people, vehicles and materials away from assets.
Core rules and concepts
- Four layers: deter, detect, delay, respond. Fences, lighting, bollards and signage deter; CCTV and alarms detect; gates and locks delay; guards respond.
- Access control cycle: identify, authenticate, authorise, record, escort or monitor, and confirm exit.
- Perimeter: use a single controlled entry where possible; check fence line, gates, locks, lighting and blind spots on patrol.
- Visitor management: name, ID, purpose, host, time in and out, badge, escort.
- Material control: gate pass, quantity, vehicle number, driver, loading and unloading supervision, returnable and non-returnable items.
- Vehicle checks: cabin, boot, undercarriage and spare wheel; use mirrors and torches; watch for tailgating.
Worked example
A contractor's pass expired yesterday. He says the new pass is 'in process'. Reasoning: an expired pass is not authorisation. Verify identity, call the host, deny entry until a valid pass or written temporary approval is issued, record the event, and inform the supervisor. Allowing entry 'to be helpful' breaks the audit trail.
Traps that cost marks
- Confusing tailgating (following through a door) with piggybacking (following with apparent consent).
- Checking only the driver and not the vehicle.
- Treating CCTV as a substitute for a guard's presence and verification.