---
name: rt-exploit-physical
description: "Physical security assessment skill for authorized facility walkthroughs, access-control review, visitor process evaluation, tailgating simulation, evidence handling, and remediation."
---

# rt-exploit-physical - Physical Security Assessment

> Physical testing requires explicit SEAD authorization, site contacts, safety rules, local legal awareness, and stop conditions. Never create unsafe conditions or bypass life-safety systems.

## Overview

Physical security testing evaluates whether people, process, and facility controls protect sensitive areas and assets. This skill focuses on structured observation, approved simulation, and process improvement.

## Prerequisites

- Approved locations and test windows.
- Approved techniques and prohibited areas.
- Emergency contact and stop phrase.
- Badge/visitor policy expectations.
- Photography and recording rules.
- Local safety requirements.

## Test Areas

| Area | Control Questions |
|---|---|
| Reception | Are visitors verified, logged, and escorted? |
| Badge Control | Are badges visible, unique, and challenged? |
| Tailgating | Do employees challenge unknown persons? |
| Sensitive Rooms | Are server rooms and storage areas access-controlled? |
| Deliveries | Are delivery paths separated from secure areas? |
| Disposal | Are documents/media disposed securely? |
| CCTV/Alarms | Are monitoring and response processes defined? |

## Workflow

1. Confirm site briefing and safety constraints.
2. Perform walkthrough and map control points.
3. Execute only approved simulations.
4. Document observations with timestamps and location.
5. Debrief client promptly if sensitive weakness is observed.
6. Convert observations into findings and remediation roadmap.

## Evidence

Use approved photos, access logs provided by client, observation notes, and post-test interviews. Avoid publishing employee names unless required and authorized.

## Remediation

- Visitor verification and escort process.
- Anti-tailgating awareness.
- Badge challenge culture.
- Sensitive room access reviews.
- Secure disposal bins and clean desk policy.
- Delivery and contractor handling process.
- Physical incident reporting channel.

## Autodoc

```bash
python _rtexit/scripts/autodoc_engine.py log --skill rt-exploit-physical --phase exploitation --cmd "physical assessment observation" --output "redacted observation summary"
```

