How it works
Locks, badges, sign-in processes, visitor escorts, cable locks, storage cabinets, and restricted areas reduce unauthorized physical access.
Match control strength to the asset. A public classroom printer needs different protection than an administrator laptop cart.
Common error
Security that blocks normal school operations may be ignored. AP answers should balance protection and usability.
Worked example
Choose preventive controls for an equipment room while keeping emergency procedures usable.
Evidence
Door: routinely propped open
Visitor entry: unescorted
Equipment checkout: undocumentedUse approved door access, an escort process, and documented checkout to reduce unauthorized entry and removal. Coordinate changes with the applicable building procedures so authorized and emergency access remain workable. A camera alone records activity rather than ensuring the door stays secured.
Exercises
2.2.1
Compare a locked cabinet and a camera as controls for spare laptops.
Show solution
A locked cabinet restricts access before removal. A camera supports deterrence and investigation but may not physically prevent removal. The two serve different functions and can complement each other.
2.2.2
Name one verification test after introducing badge-based equipment-room entry.
Show solution
Confirm an authorized badge admits its holder, an unauthorized badge is denied, and the access event is logged. Also verify the approved emergency-access process.