Comments on: Physical Security Part II http://itknowledgeexchange.techtarget.com/cisa-cissp/physical-security-part-ii/ Sun, 05 Jul 2009 05:49:39 +0000 http://wordpress.org/?v=2.6.2 By: Suzmonster http://itknowledgeexchange.techtarget.com/cisa-cissp/physical-security-part-ii/#comment-22 Suzmonster Thu, 23 Oct 2008 18:47:13 +0000 http://itknowledgeexchange.techtarget.com/cisa-cissp/physical-security-part-ii/#comment-22 The camera system for my last gig was hidden in the cupboard behind the owner's desk. The only tip-off was the small LCD monitor on the bookcase that could be easily stowed. It was off the main network and had separate security logins. Camera sensitivity, recording angles, and storage options all need careful attention to ensure the system meets your needs. We even recorded a few traffic accidents in front of the business. I'm curious about using social engineering as a pentest technique. It amazes me how a person's guard is let down when met with a friendly face and demeanor. The camera system for my last gig was hidden in the cupboard behind the owner’s desk. The only tip-off was the small LCD monitor on the bookcase that could be easily stowed. It was off the main network and had separate security logins. Camera sensitivity, recording angles, and storage options all need careful attention to ensure the system meets your needs. We even recorded a few traffic accidents in front of the business.

I’m curious about using social engineering as a pentest technique. It amazes me how a person’s guard is let down when met with a friendly face and demeanor.

]]>