Physical Security and Site Protection
What the exam tests
Physical security questions test layered protection: perimeter, building shell, interior zones, and assets. The exam looks for understanding of CPTED, lighting, locks, alarms, CCTV, and key control.
Core rules
- Defence in depth: no single control is enough. Fence, gate, lighting, door, lock, alarm, camera, guard, and procedure should reinforce each other.
- CPTED principles: natural surveillance (clear sightlines), natural access control (one obvious entrance), territorial reinforcement (signs, boundaries), and maintenance (repair broken lights and fences).
- Lighting should cover approaches, entrances, and car parks without creating glare or dark shadows.
- Locks and keys: use the right level of lock for the asset, keep a key register, apply dual control for high-value areas, and rekey after a loss.
- Alarms: know the response procedure and passcode rules. Never share codes.
- CCTV: place cameras to cover entries, exits, cash, and assets; avoid blind spots; protect recording equipment; follow retention and privacy rules.
- Sensitive areas: classify assets, restrict need-to-know access, and seal or log high-value stores.
Worked example
Stock is disappearing from a warehouse. Rather than accusing staff, you review the key register, find the stockroom key signed out to three people, note a camera blind spot at the fire exit, and see a propped door on CCTV. You recommend dual key control, re-aiming the camera, and a door alarm, and you document each finding by time and location.
Traps
Relying on one control, blocking cameras, propping doors, sharing codes, and ignoring burnt-out lights.