Introduction to Physical Security

In recent years, the intense developments in IT infrastructures and cybersecurity have led to a significant shift in attention from information security to the IT and cybersecurity domains. However, when unauthorized physical access is gained to the information asset (disk, document, etc.) to be protected, the measures taken from the IT infrastructure for that asset become completely ineffective. In other words, a “game over” situation occurs.

( Image Source : https://tajpeeran.wordpress.com/2010/10/04/physical-security/ )

Physical security threats can vary significantly. To provide clarity and ease of understanding, we can categorize and sample them as follows:

Natural Environmental Threats

• Earthquakes

• Floods

• Storms and Hurricanes

• Fires

• Radioactive Events

Manmade Threats

• Physical Access Trials

• Terror Attacks

• Theft

• Vandalism

• Unnatural Fires

• Epidemic Diseases

Notably, these threats are mainly events that cause physical damage to assets and render them completely disabled. Accordingly, it can be thought that these threats will not cause a confidentiality disclosure for information assets and controlled alterations to data.

However, it should not be forgotten that information security is not just about disclosing the confidentiality of assets or protecting them against uncontrolled alterations. The dimension of Availability is also at play, requiring the continuity and reliability of information assets and operational systems.

The realm of physical security has an extensive scope. It involves issues such as securing the location of the institution to be secured, campus and office security and preventing unauthorized access to information assets. Additionally, the structures supporting the continuity of physical security within the environment, known as "environmental controls," are also part of the scope of physical security. Hence, it's crucial to configure and manage these components securely. Power Infrastructure, HVAC (Heating, ventilation, and air conditioning), Emanation Security, and Fire Protection can be considered in this context.

Based on the information provided, it is clear that physical security is an indispensable part of a holistic information security strategy to protect information assets and ensure operational continuity. In this regard; It is vital for information security experts to understand the logic and applications of physical security. Within the scope of this module, we will provide the necessary information for security experts to meet this need.