Domain 3 · Objective reference 3.9 · Chapter 27 of 62
Protect facilities, media, power and the environment
About 5 minutes · Current ISC2 outline effective 15 April 2024; the announced 15 April 2027 replacement requires separate mapping
Session only. Enable saving or download a backup from this course’s hub.
Completion is self-reported and does not certify understanding.
See it · Try it · Recall it
Picture the topic
Remember this: Facilities fail through environment as well as intrusion.
Explore the anchors
Provide suitable supply and continuity.
Concept matching activity
Match this task or description to its concept:
Control heat moisture and fire exposure.
Choose a concept before checking the explanation.
A quick way to study this topic
- Hide the explanation and redraw these three anchors from memory.
- Explain the difference between the anchors in your own words.
- Apply the distinction to the worked example below. Check the full lesson for assumptions and exceptions.
- Recall it again tomorrow, then after a few days. A memory hint is a retrieval cue, not a replacement for understanding.
Original academy illustrations and fictional exercises. These are learning simulations, not a real virtual machine, network assessment or measure of job readiness. Activities reset when you leave or reload; they do not change quiz scores.
What this chapter explains
- Concepts and mechanisms
- Design, evidence and tradeoffs
Concepts and mechanisms
Physical controls address unauthorized access and environmental conditions around people, systems and evidence. Consider server rooms, communications closets, media and evidence storage, work areas, utilities and delivery paths. Power conditioning, backup power and redundancy support different failure conditions. HVAC controls temperature and humidity, while monitoring detects environmental drift or failure. Fire prevention, detection and suppression are distinct measures that need appropriate professional design.
Design, evidence and tradeoffs
Validate access approval, visitor handling, alarms, monitoring response and retained records. Protect stored media and evidence according to sensitivity and custody needs. Maintenance access and emergency overrides need accountability. A locked room does not resolve shared power, overheating or unsafe suppression assumptions. Test required service behavior and emergency procedures with facilities and safety owners rather than changing physical safeguards as an isolated IT task.
Worked example
A server room has restricted access but overheats after a cooling failure. Availability depends on environmental protection as well as door controls.
Check your understanding
What is missing if a facility assessment checks only whether the room is locked?
Show explanation
Environmental, utility, emergency, maintenance and monitoring-response dependencies remain outside that narrow check.
Source and study boundary
Official syllabus source. The reference identifies the topic being taught. Explanations and examples are original academy material; a topic link does not establish independent approval or sufficient exam mastery.