<!-- Copyright (c) 2026 defconxt. All rights reserved. -->
<!-- Licensed under AGPL-3.0 — see LICENSE file for details. -->
---
name: performing-physical-security-awareness
description: >-
  Perform physical security awareness training covering access control
  procedures, tailgating prevention, clean desk policies, visitor management,
  and sensitive area protocols aligned with ISO 27001 Annex A.11.
domain: cybersecurity
subdomain: security-awareness
tags:
  - physical-security
  - access-control
  - tailgating
  - clean-desk
  - visitor-management
version: "1.0"
author: defconxt
license: AGPL-3.0
metadata:
  mitre-attack: ["T1200"]
---

# Performing Physical Security Awareness

## Overview

Physical security awareness trains employees on protecting facilities, equipment,
and physical assets. This skill covers access control badge procedures, tailgating
and piggybacking prevention, clean desk and clear screen policies, visitor escort
requirements, and sensitive area access protocols for server rooms and executive floors.

## Prerequisites

| Requirement | Install |
|---|---|
| Access control | Badge system (HID, Lenel, or Genetec) |
| Surveillance | CCTV monitoring and recording capability |
| Policy | Physical security policy, clean desk policy |

## Commands

| Command | Description |
|---|---|
| `node agent.js tailgating --scenarios office,datacenter,parking` | Generate tailgating prevention training scenarios |
| `node agent.js clean-desk --audit-checklist standard` | Create clean desk policy audit training |
| `node agent.js visitor --workflow escort,badge,nda` | Build visitor management training procedures |
| `node agent.js sensitive-areas --zones datacenter,exec-floor,lab` | Create sensitive area access training |

## Workflow

### Step 1 — Assess Current State

Evaluate existing capabilities and identify gaps before implementing changes.

```bash
# Run assessment with agent tooling
node agent.js tailgating --scenarios office,datacenter,parking
```

### Step 2 — Plan and Design

Define objectives, scope, timeline, and success criteria.

```bash
# Plan implementation
node agent.js clean-desk --audit-checklist standard
```

### Step 3 — Execute and Deliver

Implement the planned activities and deliver outputs.

```bash
# Execute delivery
node agent.js visitor --workflow escort,badge,nda
```

### Step 4 — Measure and Optimize

Track results against success criteria and iterate.

```bash
# Measure results
node agent.js sensitive-areas --zones datacenter,exec-floor,lab
```

## Verification

- [ ] Prerequisites validated and tools installed
- [ ] Assessment of current state completed
- [ ] Implementation plan documented and approved
- [ ] Execution completed per plan
- [ ] Results measured against defined KPIs
- [ ] Findings documented and next steps identified
