Securing spaces
Protect a physical space
Map physical access, environmental risks, and evidence of intrusion.
Work through defensive scenarios and explain the evidence behind each decision.
Trace a path to the asset
A locked server rack is useful, but an unlocked room may still expose network sockets, backup media, or power controls. Walk through who can reach each asset and whether a visitor can follow an employee through a controlled door. This is tailgating.
Threats also include fire, water, heat, and loss of power. Confidentiality is not the only goal: keeping a service available may require cooling, protected power, and recovery arrangements.
- 1Building access
- 2Room access
- 3Rack access
- 4Device access
Combine prevention and detection
Badge access and visitor procedures restrict entry. Door alarms, access logs, and cameras can help reveal a violation. Place a control where it addresses the actual weakness, and consider privacy, cost, and emergency access.
Compare badge records with the timing of an incident. A door-open alert supports an investigation but does not identify the intruder by itself. Preserve the original evidence and record who examined it.
Check yourself
Why is a camera alone insufficient to secure a server room?Show answer
It can record an entry but may not prevent it. Use access controls as well as monitoring and a response process.
References used to build these lessons
We used these official documents as references when building this course's lessons. They are the sources for the syllabus structure and course requirements.
College Board · Effective fall 2026