Introduction to the access control database for physical security workers – assessment form

When you are ready to complete the assessment complete your details and then complete each of the questions. There are 16 questions, you need to get 14 correct in order to pass. You can attempt the course twice free of charge during 2022. If you have any issues please get in touch! Please attempt each question. Once completed please make sure that you click the ‘Submit’ botton at the bottom of the form – good luck! Please allow 14 days for your results!

Step 1 of 2

Candidate name *

First

Last

Email *

01: In the UK which organisation is responsible for enforcing data protection regulations: *

Information Commissioners Office
Citizens Advice bureau
Trading Standards office
The Home Office

02: Which of these methods can be introduced to increase access control security immediately? *

Big signs warning the CCTV is in use?
Combining use of a security card with a PIN
Printing a LOGO and address on the card so it can be returned if lost
Making sure all staff have the security office contact details

03: Which of these design combinations is best from a security point of view? *

ID cards with LOGO, company name and address printed on them
ID cards with just the company LOGO
ID cards with return to address on the back with reward for returning if found
Plain card, employee photo and name only, plain lanyard with no company branding

04: It is important that employees understand how their movement data is gathered and used via use of their ID card. How is this best achieved? *

Tell them during their workplace orientation
Put a notice on the company intranet
Include a clause in their contract of employment
You don’t need to tell them; it's common sense and they should know!

05: What is an access control systems most basic function? *

Keep someone in a job
To say yes or no to access requests
Gather information on ID card use & door alarms
Prevent crime

06: How should an access control database be classified? *

Important
Confidential
Business Critical
Open access

07: Who, at a minimum, should be working together to ensure that system information is managed and protected properly? *

The HR & compliance teams
The IT, information security, compliance, and physical security teams
The general manager and facilities team
Its outsourced so not the company’s problem

08: What do we mean by assigned records? *

It relates to the individual ID card serial number
It relates to a named individual, the card holder, and will normally also be their work ID card
Records of people we want to keep a special eye on
Records of people leaving the office late

09: What do we mean by unassigned cards? *

It relates to the individual ID card serial number
Records of people leaving the office late
Relates to cards generally used for temporary access to contractors, delivery drivers and other visitors and are signed out as required
Records of people we want to keep a special eye on

10: Who is best placed to manage records of all company ID card holders, employees, temporary staff, contractors, and consultants? *

The HR dept
The security teams
A dedicated database owner
The compliance teams

11: Which important set of regulations must a database manager be familiar with? *

Health & Safety regulations
General Data Protection Regulation (GDPR)
Building regulations
Not relevant, regulations should be dealt with by the legal team

12: Which of the following is an audit trail? *

A record of instructions received, together with any supporting notes, justifying why an ID card was issued
Extra information you remember, you didn’t need to make notes because you have a good memory!
Your notebook
A list of employing managers

13: If your company runs a ‘card not used for 4 weeks’ report, what action should be taken with the list of cards with no activity in that period? *

Wait to hear from the employing manager
Email the card holder and ask them why they haven’t needed to use their ID card in 4 weeks
The card should be blocked, and the employing manager contacted for an update, explain that the card has been blocked until an update is received
Check again in a few days and see if any of the cards have been used

14: You find a record on your access control system that you do not recognise and for which you cannot find a supporting audit trail – what do you do? *

Immediately block the card and start an investigation
Put it on your to do list, you are busy, and it will have to wait
Delete the card and hope no one notices; you don’t want to get anyone into trouble
Write a quick report and wait to be told what to do

15: What MUST be done when commissioning a new access control system? *

Gather as many glossy brochures as possible to make it look like you’ve done a lot of research
Identify a number of existing system users and arrange a site visit
Get the cheapest system going, after all they are all the same right?
Visit the seller’s offices and attend their sales presentation

16: End users benefit from learning more about how access control data is used because: *

It makes them more effective at their jobs
It helps them identify issues and suggest solution
It helps maximise return against investment in the system
All the above