User guide

Chapter 1. Security Overview

1.1.3.1. Physical Controls

Physical control is the implementation of security measures in a defined structure used to deter or

prevent unauthorized access to sensitive material. Examples of physical controls are:

• Closed-circuit surveillance cameras

• Motion or thermal alarm systems

• Security guards

• Picture IDs

• Locked and dead-bolted steel doors

• Biometrics (includes fingerprint, voice, face, iris, handwriting, and other automated methods used to

recognize individuals)

1.1.3.2. Technical Controls

Technical controls use technology as a basis for controlling the access and usage of sensitive data

throughout a physical structure and over a network. Technical controls are far-reaching in scope and

encompass such technologies as:

• Encryption

• Smart cards

• Network authentication

• Access control lists (ACLs)

• File integrity auditing software

1.1.3.3. Administrative Controls

Administrative controls define the human factors of security. They involve all levels of personnel within

an organization and determine which users have access to what resources and information by such

means as:

• Training and awareness

• Disaster preparedness and recovery plans

• Personnel recruitment and separation strategies

• Personnel registration and accounting

1.1.4. Conclusion

Now that you have learned about the origins, reasons, and aspects of security, you will find it easier to

determine the appropriate course of action with regard to Red Hat Enterprise Linux. It is important to

know what factors and conditions make up security in order to plan and implement a proper strategy.

With this information in mind, the process can be formalized and the path becomes clearer as you

delve deeper into the specifics of the security process.