What are the best defenses against tailgating and physical social engineering in a hybrid office?
With people coming and going at different times, our physical security is slipping. I’ve noticed strangers 'tailgating' behind employees into the badge-access areas. How are you all handling this social engineering risk without making the office feel like a prison or making employees feel awkward about closing the door on their colleagues?
2024-06-10 in Cyber Security by Robert Henderson
| 8586 Views
All answers to this question.
Physical social engineering is often overlooked for digital threats. We solved this by installing optical turnstiles that trigger an alarm if two people pass through on one badge. However, the tech only goes so far. You need to gamify the 'hold the door' culture. We ran a 'Challenge a Stranger' campaign where employees were rewarded with coffee vouchers for politely asking to see a badge. It reframes the interaction from being 'rude' to being a 'security champion.' Clear signage at entry points also helps shift the burden from the employee to the corporate policy.
Answered 2024-08-12 by Amanda Clark
Do you think high-traffic times like Tuesday mornings make it easier for attackers to blend in, or is it more of a late-night vulnerability?
Answered 2024-08-15 by Jennifer Martinez
-
Jennifer, it's definitely the high-traffic times. Attackers often carry a box or coffee cups so their hands look full, forcing a polite employee to hold the door. We've trained our front desk to look for these 'prop-based' social engineering cues specifically during the 8:00 AM to 9:00 AM rush.
Commented 2024-08-18 by James Wilson
We use a 'security buddy' system where teams are responsible for their floor's entry points. It makes everyone feel accountable for the physical perimeter.
Answered 2024-08-20 by Christopher Lee
-
Christopher’s idea is great. Accountability at the team level ensures that the responsibility isn't just on the security guards who can't be everywhere at once.
Commented 2024-08-22 by Robert Henderson
Write a Comment
Your email address will not be published. Required fields are marked (*)

