The server room with the propped door
The server room holds all the company data. It has a fine lock. But on hot days someone props the door open with a chair.
No hacker is needed. Anyone can walk in, pull a cable or take a drive.
Today you look at physical weaknesses: the doors, the desks and the buildings that hold the machines.
By the end of this lesson
Note
I can name the physical weaknesses of a site and say how each one is reduced.
Key words
| Word | What it means | Example |
|---|---|---|
| Access control | Rules and tools that decide who may enter or use something. | |
| Entry control system | A lock, badge reader, keypad or biometric reader on a door. | |
| Tailgating | Following an authorised person through a door without proving who you are. | |
| Shoulder surfing | Watching someone type a password or code over their shoulder. | |
| Audit | A check of records to see who did what. | |
| Rugged | Built to survive knocks, dust, water and heat. | |
| Vandalism | Damaging property on purpose. | |
| Natural disaster | A flood, fire, storm or earthquake. | |
| Backup | A copy of data kept safe in case the first is lost. | |
| Monitoring | Watching an area or system all the time. | a camera |
The cells students fill in are left blank in this preview.
Starter: what you already know
Have a go
Starter: what you already know
3 questionsYour answers are marked here and are not kept. A college account keeps every student’s marks.
Cycle 1: missing or poor access control
With no access control anyone can walk to the machines. The fix is an entry control system: a lock, a badge reader, a keypad or a fingerprint reader.
With poor access control the system exists but is weak. A badge reader does not help if people hold the door open.
Fixing poor access control
No tailgating. Each person taps in on their own. Tell staff to challenge strangers politely.
Complex access codes. 1234 is guessed in seconds. Use longer, less obvious codes.
Change codes regularly, and when someone leaves.
Monitor access areas with cameras and alarms.
Audit staff access. Check the list: who still has access who no longer needs it?
Worked example: an access audit
| Name | In the server room log | On the allowed list | Finding |
|---|---|---|---|
| Sam | Yes | Yes | Fine |
| Aisha | Yes | Yes | Fine |
| Raj | Yes | No | Not allowed: ask why |
| Lee | No | Yes | Has access but never uses it: remove? |
The cells students fill in are left blank in this preview.
Check: access control
Have a go
Check: access control
4 questionsYour answers are marked here and are not kept. A college account keeps every student’s marks.