Houston, We Have an Imposter: How Human Behavior Voids Physical Controls

Abstract:

You’ve invested in top‑tier physical security controls: badge access on every stairwell landing and elevator floor, full camera coverage, reinforced hardware, security personnel, the works. So, you’re covered, right?

Maybe. But even the strongest controls can fail if the people behind them aren’t prepared. How are employees trained to handle unfamiliar visitors? How do they react when someone looks like they belong, even when they don’t? And when you bring in a physical penetration tester, how do you know the assessment is thorough, realistic, and worth what you paid for it?

 In this talk, you’ll hear real‑world stories of the impact of weak security culture and controls from physical penetration tests, from successes to surprises to moments you hope would never happen at your own organization. You’ll learn how to evaluate the quality of a physical security assessment, what human vulnerabilities attackers consistently successfully exploit, and how to help personnel build habits and awareness that meaningfully strengthen your defenses to safeguard your people and your organization.

Key Points & Takeaways

• Common human‑factor weaknesses exploited during physical intrusions and practical ways to mitigate them
• How to improve situational awareness and report rates of personnel
• How to ensure your physical penetration test supports real improvements in security culture and controls