IT Security Risk Control Management: An Audit Preparation Plan

© Raymond Pompon 2016

Raymond Pompon, IT Security Risk Control Management, 10.1007/978-1-4842-2140-2_19

19. Physical Security Controls

Raymond Pompon¹ 

(1)Seattle, Washington, USA

One of the problems with offices is that you can get into them because by design you have to actually go to work.

—Chris Nickerson

The interesting thing about physical security is that some security folks write it off as not my problem. We too can be victims of the Someone Else’s Problem effect. In 2016, the California Attorney General reported that 22% of all reported breaches came from physical theft and loss. Physical security problems were second only to malware. As much as we IT security geeks would like to distance ourselves from physical security problems, it’s something ...