47 minutes

Video Transcription

Okay. Now, the first topic that we're gonna talk about is we're gonna talk about the facility, the physical premises itself, and I know many of us his end users don't necessarily think about that being as part of our of our jobs, right? We have security guards. We have other means of enforcing security in the building. But we play of
very, very large
because as we come and go from a building, we really are the eyes and the ears of the company. So we look for people. Maybe that shouldn't be there. Specifically, if you have swiped card access to a building, someone doesn't have a swipe card that should immediately trigger our attention that maybe something's going on now again,
there are many reasons that somebody might have access to a building that does not have. You know, if they don't have a swipe card, that's fine. But our job is to make sure we escort that person to security.
We don't allow someone into the building that does not have the credentials to enter the building, and we also have to make sure that we don't just deny them intrigue than go around about our business. You know the idea there is. Well, I've done my job. I've told them they can't come in.
Not really. Because that person just gonna wait on the outside of the facility until someone will let them in.
Now, I'm from North Carolina, and trust me, we have our only problems in North Carolina. But
one thing you're trained in North Carolina from a very early age is you hold the door for people behind you, right? It would be rude not to do so.
So I think what we have security professionals have to do is not just tell people what to do and what not to do
but help folks understand the right way to do
something that will help with security. And basically, what I mean by that is just to tell people, don't let someone in the building is fine.
But what am I gonna do with my gonna physically force them out? And I'm gonna slam the door in their face?
No. You know the best way that I found the handle? This is something along the lines of saying.
Look, I noticed you don't have your badge with you today. I want to make sure that you get access to everywhere that you need. I don't want you to be hassled by security. Let me walk you down to the security guard and let's make sure you get registered. Let's get your badge so that you could be on the way.
You know, it's something that's very polite. It's very friendly. Here, let me help you.
But basically what I'm saying is I'm accepting the responsibility of him being in the building. I'm not gonna allow you to move any further without going through the proper champ.
That's a really important idea. Come so many times, we just turn a blind eye on someone entering or even in best cases, I've seen people that will refuse entry. But then that person just sits around outside the door waiting for the next person to let the men. So we really have to be very mindful of that.
You know, a tax on the facility. Uh, certainly having access to your building helps me tremendously
in the realm of data compromised. Now I can get access to your network. Maybe I confuse sensitive information. Maybe I can get back to the workstation area and find somebody who didn't log over their system.
That's a tremendous breach, but also don't get about issues of workplace violence and folks attain access to a building that they shouldn't be allowed into and so many terrible, terrible things can happen, so we have to take
physical security.

Up Next

Intro to Infosec

Cybrary's introduction to information security is intended for everyone interested in a career in cybersecurity. Learn the basics, then launch your new career by continuing with our CompTIA A+, Network+, or Security+ Courses.

Instructed By

Instructor Profile Image
Kelly Handerhan
Senior Instructor