Software Architect's Handbook

Physical security controls

Physical security consists of security measures that are put in place to prevent unauthorized access to facilities, equipment (for example, servers), personnel, and other resources. Physical security is a combination of multiple systems working together and may include gates, locks, key cards, video surveillance, lighting, alarm systems, and security personnel.

When you think about securing a software application, you may tend to focus on other aspects of security, but physical security should not be overlooked. Some security threats are only made possible when an attacker gains physical access to one or more resources. Attackers may be internal or external to the organization, so the use of multiple techniques ...