ABSTRACT

Th e information security industry has a long-standing history in Internet protocol (IP)–based tools, utilities, and communications, but this is not so much the case in the physical security realm, which is in the midst of a transition to IP. In 2007, Forrester Research stated in its report called “Trends 2007: Physical and Logical Security Convergence” that “…the physical security environment has been dominated by analog, stand-alone control systems with limited interconnectivity, digital communications, or integrated management capability.” Physical security is often emphasized as one of the fi rst layers of defense when addressing information systems, but it is a signifi cant and critical element of security practices that can have a great impact on the networking foundation and information security architecture. In fact, it is signifi cant enough that the certifi ed information systems security professional (CISSP) examination identifi es physical (environmental) security as one of its ten common body of knowledge (CBK) domains. Th is is then subdivided into layered physical defense and entry points, and site location principles.