1. Objectives Telecommunications and Network Physical and Personnel
Recognize that physical security and cyber security are related
Recognize that personnel security policies and procedures are related to cyber security
Explain how awareness training strengthens cyber security practices
Planning, Policies, and Procedures
Physical and Personnel
Telecommunications and Network
System
Application and Individual

2. Physical Security
Addresses the protection of the organization’s assets:
Personnel
Property
Information 2

3. Physical And Cyber Security
Disciplines merging
Physical access can lead to compromise

4. Physical Security Threats
Most threats in this area are ‘physical’
Fire
Flood
Natural disasters
The Human factor is an exception to this rule

5. Major Sources Of Physical Loss
Temperature extremes
Gases
Liquids
Living organisms
Excessive movement
Energy anomalies
Source: “Fighting Computer Crime” by Donn B. Parker 5

6. Physical Security Threat Categories
Natural and Environmental
Man-made

7. Natural And Environmental Threats
Hurricanes
Tornadoes
Earthquakes
Floods
Lightning
Mudslides
Fire
Electrical

8. Man-Made Threats
Hackers
Theft
Human error

9. Physical Security Countermeasures
Property protection
Structural hardening
Physical access control
Intrusion detection
Physical security procedures
Contingency plans
Physical security awareness training

10. Property Protection Fences Gates Doors Locks and keys Lighting
Fire detection and suppression systems

11. Structural Hardening Robust construction Minimal penetration
Building complexity

12. Physical Access Control
Ensures only authorized individuals are allowed into certain areas
Who
What
When
Where
How

13. Intrusion Detection
Guards
Dogs
Electronic monitoring systems

14. Physical Security Procedures
Impose consequences for physical security violations
Examples:
Log personnel access to restricted areas
Escort visitors, delivery, terminated personnel

15. Contingency Plans Considerations include Generators
Fire suppression and detection systems
Water sensors
Alternate facility
Offsite storage facility

16. Physical Security Awareness Training
Train personnel what to do about
Suspicious activities
Unrecognized persons

17. Personnel Security
Practices established to ensure the safety and security of personnel and other organizational assets

18. Personnel Security It’s all about the people
People are the weakest link
An avenue to mold and define personnel behavior

19. Personnel Security Threat Categories
Insider threats
Social engineering

20. Insider Threats One of the most common threats to any organization
More difficult to recognize
Include
Sabotage
Unauthorized disclosure of information

21. Social Engineering Threats
Multiple techniques are used to gain information from authorized employees and using that information in conjunction with an attack
Protect your password (even from the help desk)
Protect personnel rosters

22. Dumpster Diving
Rummaging through a company’s or individual’s garbage for discarded documents, information, and other precious items that could be used in an attack against that person or company

23. Phishing
Usually takes place through fraudulent s requesting users to disclose personal or financial information
appears to come from a legitimate organization

25. Security Awareness
Recognizing what types of security issues might arise
Knowing your responsibilities and what actions to take in case of a breach

26. Policies And Procedures
Acceptable use policy
Personnel controls
Hiring and termination practices

27. People And Places: What You Need To Know
Physical security
Physical security threats and countermeasures
Personnel security
Personnel security threats and countermeasures