One cabinet, seven questions
A cabinet of switches and cables sits in a corridor. You are asked to make it secure.
You do not buy a lock and walk away. You ask: what can go wrong? Which controls fit? Are they working next month? Controls need choosing, setting up and watching.
Key words
| Word | What it means |
|---|---|
| Risk | The chance that something bad happens, and how bad it would be. |
| Review | Look carefully at a situation to learn about it. |
| Recovery control | A control that gets a system working again after an incident. |
| Monitor | Keep checking that something works. |
| Regulation | A rule set by law. |
| Organisational policy | A rule set by the company itself. |
| Personal security | Keeping people safe. |
| Environmental security | Protecting equipment from heat, water, fire and power problems. |
| Procedure | A set of steps people follow, the same way each time. |
| Sensor | A device that detects something, such as an open door. |
| Network | Computers and devices joined together so they can share data. |
The cells students fill in are left blank in this preview.
By the end of this lesson
Note
I can review a risk, choose controls of each kind, and plan how to watch them and follow the rules.
Starter: what you already know
Have a go
Starter: what you already know
3 questionsYour answers are marked here and are not kept. A college account keeps every student’s marks.
Cycle 1: review the risk first
Start by finding out the facts. Gather information from the system and from the users.
From the system: look at logs, the equipment list and the room. From the users: ask what goes wrong, who has keys and who uses the cabinet.
Only then choose controls. A control chosen without facts can miss the real risk.
Cycle 2: select, apply, monitor
Choose controls from all seven kinds: preventative, detective, corrective, deterrent, directive, compensating and recovery.
Apply them. Then monitor them. Check the lock works, read the logs, test the alarm and ask if staff still follow the rule.
Follow the law and the company policies too. Examples are data protection law, health and safety law and the company security policy.
Seven kinds of control for the corridor cabinet
| Kind | Control for the cabinet |
|---|---|
| Preventative | Lock the cabinet door |
| Detective | A log of who opens it, and a door sensor |
| Corrective | A procedure for what to do after a power or fire problem |
| Deterrent | A visible sign and a camera in the corridor |
| Directive | A notice: "Engineers only", and staff training |
| Compensating | A spare power supply if one fails |
| Recovery | A saved copy of the switch settings, so a new one can be set up fast |
The cells students fill in are left blank in this preview.
Check: choose the control
Have a go
Check: choose the control
4 questionsYour answers are marked here and are not kept. A college account keeps every student’s marks.