Access Control Categories

Administrative (Directive) Controls: Organizational policies and procedures.

Technical Controls: Hardware, software, firmware (e.g., firewalls, encryption).

Physical Controls: Physical barriers (e.g., locks, fences, guards).

Access Control Types

Preventative: Stops unauthorized actions.

Detective: Identifies unauthorized actions.

Corrective: Fixes issues caused by unauthorized actions.

Recovery: Restores systems after an attack.

Deterrent: Discourages attacks.

Compensating: Provides alternative safeguards.

Physical Security

Phase1

Fences (Deterrence, Preventative): Smaller fences deter, while taller ones prevent unauthorized access.

Gates (Deterrence, Preventative): Control points at the perimeter.

ASTM Standard:

• Class I: Residential
• Class II: Commercial/General Access
• Class III: Industrial/Limited Access
• Class IV: Restricted Access

Bollards (Preventative): Prevent vehicle access while allowing foot traffic.

Lights (Detective and Deterrence): Fully illuminate the area to deter and detect intruders.

Phase2