Class 9 Lab 2 ‐ Securing an Office Building - Justin-Boyd/CIT-Class GitHub Wiki
What should be taken into account when considering the location of an office building?
Answer
If privacy is important, the location should be hidden among natural surroundings.
Natural surroundings can also protect against electronic eavesdropping if the building is located among hills or mountains.
Offices should be located in proximity to emergency services. For example, it is important that police officers can access the site quickly in case of a break-in.
How tall should the fences be when designing a secure office building? And why should they be that height?
Answer
A fence that is 6 feet or higher is considered too high to climb, but if the building includes restricted areas, 8 feet or higher would be more appropriate.
How would you landscape the area around the building to provide natural access control?
Answer
Segment the area into security zones, with different protections for each.
Pathways to entrances should be clearly marked and well-lit, and there should be a visitor sign-in book at the entrance.
Bollards should be placed at each entrance that is close to vehicle traffic.
There should be clear lines of sight among the facilities to deter potential intruders.
Which access controls would you implement? List at least three.
Answer
Locks on every external gate, door, and window
Locks on doors that link security zones
Security patrol guards
Logs of incoming and outgoing visitors and employees
Mantrap
Metal detectors at the entrance for visitors (not employees)
RFID cards for access to facilities, and zones that restrict card access
Overlapping light zones, so that intruders will find it difficult to hide
What type of surveillance controls would you use?
Answer
A complete CCTV system is recommended, including IDS in more important and sensitive areas.
Can you think of any other helpful security measures that would secure other aspects of an office building?
Answer
Drawers with locks
A safe for sensitive data
Security clearance for employees
On-premises server room with complete protection (lock and guard)
Onboarding and Offboarding
Job rotation
Auditing
Mandatory vacation
Zero trust policy
Tinted Windows
Clean Desk Policy