Physical Security Operations Flashcards
7 cards from real ICS practice questions. Tap to flip, then mark Knew It or Still Learning — missed cards come back until you master them.
Read the first 7 Physical Security Operations flashcards as text
An ICS site security plan requires a 'two-person integrity' (TPI) rule for certain high-consequence areas. What does TPI prevent?
Answer: Insider threats by requiring two authorized persons to be present at all times
Two-person integrity requires two qualified individuals to be present simultaneously, reducing the risk of sabotage or unauthorized actions by a single insider.
What is the role of a Physical Security Information Management (PSIM) system in an ICS environment?
Answer: Aggregates and correlates data from multiple physical security subsystems into a unified interface
PSIM integrates disparate physical security systems (CCTV, access control, alarms) into a single platform for unified situational awareness and response coordination.
During a red team exercise at a gas compression facility, testers successfully bypass a door by shimming the latch bolt. Which hardware upgrade would MOST effectively prevent this attack?
Answer: Install a deadbolt lock in addition to or instead of the latch bolt
Deadbolt locks extend a solid bolt into the strike plate that cannot be retracted by shimming, unlike spring latch bolts.
A pipeline SCADA operator receives a report that surveillance cameras at a remote pump station have been physically disabled. According to a defense-in-depth model, which compensating control should immediately activate?
Answer: Dispatch of security personnel and increased patrol frequency
Disabling cameras is often a precursor to a physical attack; compensating controls include dispatching security and increasing human surveillance at the affected site.
What distinguishes a 'passive infrared' (PIR) sensor from an 'active infrared' sensor in ICS perimeter protection?
Answer: PIR sensors detect emitted body heat; active sensors transmit and receive IR beams
PIR sensors passively detect the infrared energy emitted by warm bodies, while active IR sensors project a beam and trigger an alarm when the beam is broken.
Which document should an ICS facility's physical security team consult first when developing a site-specific Vulnerability Assessment?
Answer: DHS CISA Physical Security Performance Goals (PSPG)
DHS CISA's Physical Security Performance Goals provide sector-specific, risk-informed guidance aligned with US critical infrastructure protection requirements.
An ICS auditor finds that terminated employees' physical access badges are not deactivated until three days after their last working day. Which risk does this MOST directly create?
Answer: Window of opportunity for sabotage or theft by a disgruntled former employee
Delayed deactivation leaves active credentials in the hands of individuals who no longer have a legitimate need for access, enabling potential insider sabotage.