Physical Security, Access Control and Perimeter Protection
Layered defence
This domain tests physical security as layers: perimeter, gate, reception, controlled interior and sensitive zones. Access control means identify, verify, authorise and record every person and vehicle, not just recognise faces.
Core rules
- The perimeter is the first alarm. Check fences, walls, gates, lighting, locks and blind spots on patrol; report damage at once.
- At the gate, stop every person and vehicle, state the purpose, verify ID or pass, confirm authorisation, issue a badge, and log entry and exit.
- Challenge politely but firmly. Use visitor escort for restricted areas. Never allow tailgating or hold a secure door for an unverified person.
- Control keys, cards and passes: issue against signature, recover on exit, report loss, change codes when needed.
- CCTV and alarms support access control but do not replace a guard's check. Record incidents and preserve footage.
Worked example
A known contractor arrives without a pass and says 'I come every week.' The guard checks the work order, calls the site engineer, issues a temporary pass, logs the entry and arranges an escort. Reasoning: familiarity is not authorisation. Verification and a record protect the site and the contractor.
Traps that cost marks
Waving through familiar faces; letting a second person pass on one badge; propping fire doors; leaving keys in locks; checking only the main gate; and failing to record vehicle numbers.