
Physical Data Gathering ◾ 357
© 2011 by Taylor & Francis Group, LLC
• Tampering. Test (if appropriate) for detection of tampering
through linesupervision or monitoring.
• Power loss. Test (if appropriate) documented settings for
controlled access todetermine disposition (i.e., fail secure, fail
safe, fail soft) upon power loss.
• Shoulder surfing. Test to determine if the PIN can be observed
withoutbeing noticed.
Note: The security risk assessment team should be prepared to test the functioning and strength of doors and locks to check the
effectiveness of these physical safeguards.