The drive cupboard with the open door
A cupboard holds the drives that store a firm's customer data. It has a good lock. But on hot days a chair holds the door open.
No hacker is needed. Anyone can walk in and take a drive.
Today you look at physical weaknesses: doors, desks and the places that hold the machines.
Key words
| Word | What it means | Example |
|---|---|---|
| Access control | Rules and tools that decide who may enter or use something. | |
| Entry control system | A lock, badge reader, keypad or fingerprint reader on a door. | |
| Tailgating | Following an authorised person through a door without proving who you are. | |
| Shoulder surfing | Watching someone type a password or code over their shoulder. | |
| Audit | A check of records to see who did what. | |
| Rugged | Built to survive knocks, dust, water and heat. | |
| Vandalism | Damaging property on purpose. | |
| Natural disaster | A flood, fire, storm or earthquake. | |
| Backup | A copy of data kept safe in case the first is lost. | |
| Monitoring | Watching an area or system all the time. | a camera |
The cells students fill in are left blank in this preview.
By the end of this lesson
Note
I can name the physical weaknesses of a site that holds data and say how each one is reduced.
Starter: what you already know
Have a go
Starter: what you already know
3 questionsYour answers are marked here and are not kept. A college account keeps every student’s marks.
No access control, or poor access control
With no access control, anyone can walk to the machines. The fix is an entry control system: a lock, a badge reader, a keypad or a fingerprint reader.
With poor access control, the system exists but is weak. A badge reader does not help if people hold the door open.
Fixing poor access control
No tailgating. Each person taps in alone. Tell staff to challenge strangers politely.
Complex access codes. 1234 is guessed in seconds. Use longer, less obvious codes.
Change codes regularly, and when someone leaves.
Monitor access areas with cameras and alarms.
Audit staff access. Check the list: who still has access and no longer needs it?
Worked example: an access audit
| Name | In the drive room log | On the allowed list | Finding |
|---|---|---|---|
| Sam | Yes | Yes | Fine |
| Aisha | Yes | Yes | Fine |
| Raj | Yes | No | Not allowed: ask why |
| Lee | No | Yes | Has access but never uses it: remove it? |
The cells students fill in are left blank in this preview.
Check: access control
Have a go
Check: access control
4 questionsYour answers are marked here and are not kept. A college account keeps every student’s marks.