
door are accessible by anyone who wanders into the room. The room
itself is accessible via an unlocked door to a room where visitors are
allowed to roam unescorted.
This particular agency lacks policies regarding installing security
equipment, the areas to secure, and the inability to fully understand the
system, which all add up to a potential failure.
Review your policies and keep focused on the goal. Remember to
asked questions like, “Are we trying to secure a building, or are we con-
cerned about buying new cards?” “Are we leaving parts of a system vul-
nerable just because they are out of sight?” “Will people follow or evade
this policy?”
Threat Management ...