This chapter covered physical security design and some of the common threats, vulnerabilities, and the related countermeasures pertaining to the physical and operational security domains. The focus of coverage was to understand different controls, such as preventive, detective, reactive, and deterrent, that are applicable to the physical and operational security domains, along with a few examples associated with each of them.

This chapter also covered concepts related to perimeter security as well as interior security while focusing on some of the standard specifications, such the height of the walls, recommended illumination levels, the types of fire extinguishers, the type of material used, as well as concepts related electrical and magnetic disturbances.

Auditing, investigations, and their role as detective and monitoring controls were addressed at the end of the chapter.

In the next chapter, we will cover incident management, disaster recovery, and business continuity-related concepts that pertain security operations.