Physical Security Measure

Physical security protects your people, information, and assets through a combination of physical and procedural measures. Knighthood runs it as a management cycle: understand the risks, plan proportionate measures, and keep them effective. The pages in this section cover each part.

• Physical security — what physical security is, its benefits, and the threats it manages
• Risk-based approach — using Business Impact Levels to size the measures to the risk
• Security culture — how everyone in the organisation contributes
• Security planning strategies — how the physical security plan is built

The management cycle

Knighthood applies four steps to physical security:

1. Identify the people, information, physical assets, and functions that need protection.
2. Assess the risks they face, using Business Impact Levels (BILs) to size the impact of harm, compromise, or unavailability.
3. Plan proportionate measures that match the risk, the business needs, and legal obligations.
4. Keep effective — maintain the measures, review them against evolving threats, and adjust them as risk levels change.

Physical security measures work with the wider security controls for personnel, information handling, communications, and ICT.