← VCE Data Analytics U4O2

Physical security controls

Barriers such as locks, swipe cards, CCTV and secure server rooms that stop unauthorised people reaching hardware and stored data.

Part of: VCE Data Analytics - U4O2 - Cyber Security: Data Security — Module 55

Understanding Physical security controls in VCE Data Analytics U4O2

What it does: A locked server room stops unauthorised people reaching the hardware that stores data. Secure device disposal makes sure data on retired devices cannot be recovered by someone who finds them. Swipe cards control and log physical entry. Encryption protects the data itself and is a different type of control. CCTV deters and records physical activity. It does not stop malware, which is handled by software controls such as antivirus. Physical controls must restrict who can reach the hardware, so an open office defeats the purpose.

Common mistakes: The swipe-card check should only unlock the door for a valid card. Unlocking for an expired card lets unauthorised people into the server room. It should be IF card IS valid THEN. A secure server room should only be accessible to authorised staff such as IT. Allowing everyone in defeats the physical control. It should be server_room.access = IT_ONLY.

Class: _____________________ · Name: _____________________ · Date: _________

Free printable worksheet with full answer key — or add this module to a class and your students practise it interactively.

🖨 Print worksheet + answer key Add Physical security controls to a class →

This module's key terms are also in a printable crossword (Modules 44–79) and word search (Modules 44–113).

Take this worksheet further — free with Cloodit

Each concept is reinforced from every angle — learned, then applied, then tested.

Learning

Duo

Which is a physical security control?

A firewall that filters network trafficA locked server room that only IT staff can enter

Matches

Servers sit in an open office so staff can reach them easily

↓

Servers in an open area can be reached by anyone, so unauthorised people could steal or tamper with them. They should be in a locked server room with limited access.

Applying

Meanings

Term

physical security controls

Meaning

Barriers such as locks, swipe cards, CCTV and secure server rooms that stop unauthorised people reaching hardware and stored data.

Practice

Server room: locked door

Testing

Gaps

IF swipeCardValid unlock(serverRoom)

Check Answer

Spots

1IF card IS expired THEN

2 unlock server room door

Cloodit turns curriculum-aligned coding content into journeys students work through one biome at a time.

Students earn collectable badges

Over 100 of them, across seven natural biomes.

Study Buddy

Students build a real study resource

Turns their work into revision material ready for Flash Cards and Exam study.

Diamond Dash — one of Cloodit's live, competitive Sprint games

Students lock in with Sprints

Live, competitive practice for the start of the lesson or a teacher-led lesson finisher.

A Cloodit certificate of achievement, ready to personalise and print

Custom printable certificates

Honour your top performers, or encourage a student who's trying hard — ready to print in seconds.

Add to class →

Quick Questions

1. Which is a physical security control?

A. A firewall that filters network traffic

B. A locked server room that only IT staff can enter ✓

Physical controls stop people reaching hardware and stored data. Firewalls are technical (logical) controls that work on network traffic.

2. What does a swipe-card system do for a server room?

A. Limits entry to people with an authorised card and records who entered ✓

B. Encrypts the files stored on the servers

Swipe cards control and log physical entry. Encryption protects the data itself and is a different type of control.

3. Why does an organisation install CCTV near its server room?

A. To stop malware from reaching the servers

B. To deter unauthorised people and provide evidence of who accessed the area ✓

CCTV deters and records physical activity. It does not stop malware, which is handled by software controls such as antivirus.

4. A visitor walks into an unlocked server room and unplugs a hard drive. Which control would best have prevented this?

A. A locked door with swipe-card access ✓

B. A stronger password policy

The threat is physical access to hardware. A lock with card access prevents entry, whereas a password policy only protects accounts.

5. A company throws old laptops in the bin without wiping the drives. What is the risk?

A. Someone could recover the stored data from the discarded devices ✓

B. The laptops will get a virus from the bin

Secure device disposal, such as wiping or destroying drives, stops data being recovered from old hardware.

Match the Pairs

swipe card access → Only staff with a valid card can open the door, and each entry is recorded against their name

CCTV cameras → Record who enters and leaves a server room, deterring intruders and providing evidence after an incident

Keep servers in a locked room so only approved staff can physically touch the hardware → locked server room

Wipe or physically destroy old hard drives before throwing them out so stored data cannot be recovered → secure device disposal

Servers sit in an open office so staff can reach them easily → Servers in an open area can be reached by anyone, so unauthorised people could steal or tamper with them. They should be in a locked server room with limited access.

Old laptops are dropped in the bin without wiping the drives → Data stays on the drive and can be recovered by anyone who finds the laptop. Drives should be securely wiped or destroyed before disposal.

Key Term

physical security controls

Barriers such as locks, swipe cards, CCTV and secure server rooms that stop unauthorised people reaching hardware and stored data.

Fill in the Blanks

1. IF swipeCardValid THEN unlock(serverRoom)

Hint: Type the pseudocode keyword that comes after the condition and starts the action.

2. IF NOT swipeCardValid THEN denyEntry()

Hint: Type the logical operator that reverses the condition, so an invalid card is refused.

3. WHILE buildingOpen = TRUE cctv.record() ENDWHILE

Hint: Type the method name that makes the camera capture footage of who enters.

4. oldLaptop.wipe() oldLaptop.dispose()

Hint: Type the device disposal step that clears stored data before the hardware leaves the organisation.

5. IF cardValid AND staffRole = "Admin" THEN unlock(serverRoom) ENDIF

Hint: Type the logical operator that requires both conditions to be true before the server room unlocks.

Spot the Error

Question 1

A IF card IS expired THEN

B unlock server room door

C log card ID and time

D END IF

Line A — The swipe-card check should only unlock the door for a valid card. Unlocking for an expired card lets unauthorised people into the server room. It should be IF card IS valid THEN.

Question 2

A server_room.door = LOCKED

B server_room.access = EVERYONE

C CCTV.record = ON

Line B — A secure server room should only be accessible to authorised staff such as IT. Allowing everyone in defeats the physical control. It should be server_room.access = IT_ONLY.

Question 3

A camera.location = SERVER_ROOM

B camera.record = ON

C camera.keep_footage = 0 DAYS

Line C — CCTV footage must be kept for a period so incidents can be investigated. Keeping it for 0 days means nothing can be reviewed. It should be a value such as 30 DAYS.

Question 4

A old_laptop = RETIRED

B ignore(old_laptop.drive)

C dispose(old_laptop)

Line B — Device disposal must remove stored data before the hardware leaves the organisation. Ignoring the drive leaves data that others could recover. It should be wipe(old_laptop.drive).

Question 5

A FOR EACH room IN server_rooms

B require nothing

C log every entry

Line B — Swipe-card access means every entry to the server room needs a card. Requiring nothing removes the control. It should be require swipe_card.

Student with a class code? Join your class →