How facility, room, rack, and cable controls protect network devices from theft, tampering, and disruption.
Physical security protects the facilities, rooms, racks, cables, consoles, and environmental systems that logical network controls depend on. An exposed switch or patch panel can be disconnected, altered, reset, or stolen regardless of the strength of its firewall rules.
| Control | Primary purpose |
|---|---|
| Locked room, cabinet, or rack | Restrict direct access to equipment |
| Badge reader and access log | Attribute entry to an identity and provide an audit trail |
| Mantrap or staffed entrance | Reduce tailgating at a high-security boundary |
| CCTV | Detect and investigate activity; it does not physically prevent entry by itself |
| Door, motion, water, smoke, or temperature alert | Surface unauthorized access or unsafe conditions quickly |
| Secure cable routing and labeling | Reduce accidental disruption and make tampering easier to spot |
A mantrap is a controlled entry area with two barriers that enforces an identity check before a person proceeds. Tailgating is unauthorized entry by following an authorized person through a controlled boundary.
1Facility boundary → telecom room → locked rack → device console and cabling
Each layer narrows access and increases the chance that an unauthorized attempt is prevented or detected. Remote branches, shared office spaces, wiring closets, and exterior cabinets need the same review as central data-center rooms; they are often less visible and less protected.
Physical controls complement rather than replace logical controls. A camera provides evidence; a lock restricts access; an access log attributes entry. A robust design uses the combination that matches the exposure.