What is Physical Security?
Physical security, told as a story about how sealed letters and guard dogs mean nothing if the door to the server room stands open.
There are sealed letters and a guard dog. But the server-room door is open.The sealed letters and the guard dog don't help. If the thief just opens the server-room door and carries the box out, it's all over.
A locked gate is useless if a window is open.No matter how tight the on-screen locks (passwords, firewalls), if a real door or window is open the thief simply walks in. A wall has to be one you can touch.
Physical security is real walls, locks, and guards.A door you touch, a lock you open with a card, a guard who checks your face, a camera that watches. It's guarding the castle in the real world, not on a screen.
The commonest thief comes not with a card but behind someone's back.This is tailgating. The doorkeeper lets only one person through at a time, and visitors get a badge and an escort — because even without a card, someone's back is always an open door.
Guard in many layers — and plan for fire, water, and power too.Add a face to the card (a cousin of two-factor), clear papers off the desk (by their color stamp), shred what you throw away, and never plug in a found USB (treat it like a bag check). Planning for fire, water, and power ties into doing business the day after it burns.
Physical security = guarding the castle with real walls, locks, guards, and cameras, not on-screen locks. The commonest gaps are tailgating, a found USB, and an uncleared desk — and you plan for fire, water, and power too.
Controls that protect assets in the physical world: access control, visitor management, locked server rooms, surveillance cameras, clean-desk policy, document shredding. The strongest logical security collapses if someone can just carry a server out, and environmental threats — fire, flood, power loss — are handled here too.
When grown-ups say it
- Physical security
- Real walls, locks, guards. Guarding in the touchable world, not on a screen. If the server walks out, no password helps.
- Access control
- Card + face. Who may enter which room. Adding a face to the card makes it sturdier. → the doorkeeper who checks three ways
- Tailgating
- Slipping in behind a back. Following closely behind someone who badged in. Stopped by letting one person through at a time.
- Visitor management
- A badge and an escort. Visitors get a badge and someone walks with them, so no stranger wanders alone.
- Clean desk
- An empty desktop. Clear every paper when you leave, filed by its stamp. → a colored stamp on every paper
- Surveillance cameras
- Who came, and when. It can't stop entry, but it records who came and when — later used to fix the footprints in place.
- USB drop
- A found USB. A thief drops a USB on purpose; plugging in a found one lets a bug in. Never plug it in. → the bridgeless island shed
- Environmental threats
- Fire, water, power. Thieves aren't the only danger — fire, flood, and blackout topple a castle too. → doing business the day after it burns