Which security domain focuses on protecting information and assets from physical actions and events?

Which security domain focuses on protecting information and assets from physical actions and events?

• A. Physical security
• B. End User security
• C. Availability
• D. Integrity

Answer: (A)

Physical security protects information and assets from physical actions and events by controlling access to facilities, rooms, and equipment, and by safeguarding the surrounding environment. This means using locks, fences, surveillance, badge access, and secure server rooms, as well as protecting backup media and data centers with fire suppression, climate control, and disaster-preparedness plans. By preventing unauthorized physical access and mitigating hazards like theft, vandalism, fire, floods, and power outages, it helps keep hardware and the data on it safe, preserving confidentiality and availability at the physical level. End User security focuses on how people interact with systems and devices; Availability is about ensuring systems and services are reachable when needed; Integrity concerns data being accurate and unaltered. While these areas matter, they address non-physical threats or data quality rather than protecting the physical space and equipment.

Physical security protects information and assets from physical actions and events by controlling access to facilities, rooms, and equipment, and by safeguarding the surrounding environment. This means using locks, fences, surveillance, badge access, and secure server rooms, as well as protecting backup media and data centers with fire suppression, climate control, and disaster-preparedness plans. By preventing unauthorized physical access and mitigating hazards like theft, vandalism, fire, floods, and power outages, it helps keep hardware and the data on it safe, preserving confidentiality and availability at the physical level.

End User security focuses on how people interact with systems and devices; Availability is about ensuring systems and services are reachable when needed; Integrity concerns data being accurate and unaltered. While these areas matter, they address non-physical threats or data quality rather than protecting the physical space and equipment.