Physical Access Control Systems
Overview
Implementing use cases for physical access control systems to monitor and secure physical access to facilities, detect unauthorized entries, and respond to security incidents.
Sample products
- LenelS2 OnGuard
- Honeywell Pro-Watch
- Genetec Security Center
Use Case Categories
| Category | Description |
|---|---|
| Access Control Alarms and Notifications | This use case involves the generation of real-time alerts and notifications in response to security events or breaches within the access control system. These alarms can indicate unauthorized access attempts, door forced open situations, or any tampering with the access control devices. The system's ability to promptly notify security personnel or administrators ensures immediate action can be taken to mitigate potential threats or security breaches. |
| Access Control Audit Trails and Compliance Monitoring | Access control systems maintain detailed audit trails of all access events, including successful and failed authentication attempts, door entries, and exits. This data is crucial for compliance monitoring, as it helps organizations verify that their access control practices align with regulatory requirements and internal policies. Audit trails enable forensic analysis following security incidents, facilitating accountability and transparency. |
| Access Control Status Monitoring | This functionality involves continuous monitoring of the health and status of the access control system, including the operational status of doors, locks, and other security devices. It ensures that all components are functioning correctly and alerts administrators to any malfunctions or irregularities. Status monitoring is essential for maintaining the integrity of the access control infrastructure and ensuring that protective measures are effectively enforced at all times. |
Core Use Cases
| Alert Name | Description |
|---|---|
| Unauthorized Access Attempts | Detects attempts to access secure areas without proper authorization. |
| Forced Entry Alarm | Triggers an alarm when a door or entry point is forced open without proper authentication. |
| Access After Hours | Alerts when access is attempted outside of regular operating hours. |
| Audit Trail for Sensitive Areas | Generates a detailed log of all access events to sensitive areas for audit purposes. |
| Unauthorized Access Modifications | Detects unauthorized changes to access control permissions or settings. |
| Door Forced Open Status | Monitors the status of doors to detect when they are forcibly kept open. |
| Access Point Offline | Notifies when an access point becomes non-operational or loses connectivity. |
| Multiple Badge Reads | Detects rapid, successive badge reads at an access point, indicating possible suspicious activity. |
MITRE ATT&CK
Not Defined