Question

During a data center audit, an IS auditor observes that the facility uses a single badge-controlled door at its entrance. Several employees are seen entering together after one person swipes a badge. Management states that the door is the primary control for restricting physical access to the server room. Which control would MOST effectively address the weakness the auditor identified?

Accepted Answer

Installing a mantrap (access control vestibule) that permits only one person to pass per authentication

Answer

Requiring all employees to change their badge access codes every 90 days

Answer

Deploying CCTV cameras to record all activity at the entrance

Answer

Implementing biometric fingerprint readers at the same single door