Examkin

Question

Difficulty: MediumSecurity Awareness Programs and Human Risk Management

During a physical security audit, an analyst notes multiple instances of unauthorized visitors entering secure facility zones by closely following badged employees through access doors. Which of the following security awareness initiatives is the most effective administrative control to directly reduce employee susceptibility to this risk?

  1. Conducting interactive tailgating awareness training that empowers employees to challenge unbadged individuals and practice courteous access refusal.Answer
  2. B
    Deploying anti-passback mechanisms on all electronic door locks to electronically restrict sequential credential-free entries.
  3. C
    Distributing a mandatory annual policy document detailing disciplinary actions for physical security non-compliance without practical instruction.
  4. D
    Enrolling all staff in monthly simulated spear-phishing campaigns to raise overall security vigilance across the organization.

Answer

Conducting interactive tailgating awareness training that empowers employees to challenge unbadged individuals and practice courteous access refusal.
Tailgating relies on human social norms such as politeness and hesitation to confront strangers. An interactive awareness program specifically addressing physical security tactics equips personnel with practical strategies to verify badges and politely challenge unbadged individuals, directly reducing the organization's human risk exposure.

Step-by-Step Solution

1
Identify the primary threat vector in the scenario.
The risk described is tailgating (piggybacking), a physical social engineering vector where unauthorized individuals gain facility entry by relying on employee politeness or lack of physical access vigilance.
Understanding the specific attack vector ensures selecting an awareness intervention that targets the relevant human vulnerability.
2
Evaluate the requested control category.
The prompt asks for a security awareness program initiative (an administrative control) that directly reduces human susceptibility.
Technical controls alter infrastructure, whereas awareness controls focus on changing human security behavior.
3
Determine the most effective behavioral awareness intervention.
Interactive awareness training on tailgating provides practical skills for stopping unauthorized entry and builds an organizational culture that normalizes verifying badges at door thresholds.
Behavioral change requires active training and empowerment rather than passive document distribution or unrelated email phishing exercises.

Key Concept

Tailgating Prevention and Behavioral Security Training
Rate this question

Topics

Security Awareness Programs and Human Risk Management

More questions from this topic