(Continued) Practice for Position

Defense in depth

Layers of security, so if one fails, the next still protects

Standoff distance

Distance between a possible bomb, like a vehicle, and a building. More distance means less damageStandoff distance

Balanced magnetic switch

High-security door sensor that alarms if someone tries to fool it with an outside magnet

Line supervision

Monitoring an alarm’s wiring, so cutting or tampering with it sets off an alarm

Dual-technology sensor

Motion sensor using two technologies, usually infrared and microwave. Both must trigger, which cuts false alarms

Multi-factor authentication

Two or more different types of proof: something you know, have, or are

Anti-passback

Stops a badge from being used to enter twice without exiting, which prevents badge sharing

Mantrap

Two interlocked doors where only one opens at a time, which stops tailgating

Fail-safe vs. fail-secure

Fail-safe unlocks when power is lost, for life safety. Fail-secure stays locked, to protect assets

OSDP vs. Wiegand

Wiegand is an old one-way, unencrypted protocol between badge reader and controller. OSDP is newer, two-way, supervised, and supports encryption

Power over Ethernet

Power and data through one network cable, used for cameras and badge readers

VLAN

One physical network split into separate virtual networks, for example to keep security systems isolated

SCIF

Accredited secure room or building for handling Sensitive Compartmented Information

Accreditation

Official approval that a SCIF meets security standards and can operate

ICD 705

Intelligence Community directive that sets SCIF construction and security standards

TEMPEST

Standards that stop electronic equipment from leaking signals that could reveal classified information

RED/BLACK separation

Keeping classified (RED) equipment and cables apart from unclassified or encrypted (BLACK) ones

TSCM

Technical Surveillance Countermeasures: sweeping for hidden bugs and listening devices

COMSEC

Communications Security: protecting communications through encryption and secure handling

Insider threat

Someone with authorized access who harms security, on purpose or by accident