The Physical (Environmental) Security domain covers threats and vulnerabilities related to the physical environment and countermeasures an organization can take to reduce the associated risks. The goal is to protect all of an organization’s resources, including the people, the facilities, the equipment, and physical media. Indirectly, this helps protect data stored on any of the equipment or media. A primary goal of physical security is to prevent unauthorized personnel from accessing a facility or its assets.
This chapter covers the following objectives: