Badge Control Adversary-Aware Review — The Access Control Stack

An expert-level course in reviewing your own badge and physical access control system the way an auditor, an insider or an intruder would look for gaps, then closing each gap with evidence. Work the access control stack - eight layers a physical access policy passes on its way to evidence: Zone Model & Access Policy; Credential Technology & Reader Configuration; Identity Lifecycle: Joiner, Mover, Leaver; Access Groups, Least Privilege & Reviews; Visitors, Contractors & Temporary Credentials; Alarm, Event Monitoring & Response; Control-Verification Testing; and Metrics, Attestation & Program Optimisation - as Yewande, physical security assurance lead at Orrington Therapeutics, facing a DEA inspection and an ISO 27001 audit with 9,800 badges for 6,200 people, leavers disabled 11 days late, 1,400 people able to open the controlled-substance vault and 23,000 unread alarms a month. Strictly defensive: every review item is a control-verification record tested on Orrington's own sites and systems, and every chapter's lab builds one component of the Badge Control Assurance File.

What you'll learn

• Build a consequence-based zone model and write badge-control policy as control-verification records with evidence sources and pass criteria, under an authorised own-site review plan.
• Set and verify a credential and reader standard, reconcile HR to the PACS, fix leaver latency and mover accumulation, and size restricted access groups to an authorised roster with real recertification.
• Control visitors, contractors and temporary credentials with sponsors, expiry, escort and qualification gates, and make alarms and badge events detectable and answered in the SOC within measured targets.
• Verify controls at the door with authorised test credentials, retest findings to closure, and sustain assurance through metrics, continuous monitoring and a signed, evidence-indexed attestation.

Sign in to enrol — you can pay by bKash or Nagad, or apply a promo code.