Physical Security -- it's often described as the "forgotten side of Security" in many organisations, financial institutions, hospitals, schools, hotels, and government buildings, yet it is a key element of an overall protection strategy. Because physical security plays a key role in so many facets of security, from preventing bank robberies to foiling inside threats, risk assessment can be a challenge. "Whether it is PCI, or CoBIT, [physical security] is even tested under most security regulations, but it is very much taken for granted,

"It appears simplistic, but it isn't. It sometimes can have a surprising amount of deficiencies. "Some of these deficiencies are because of heavy workload or lack of staff, i.e. someone leaves the institution, yet either their passkey or pass card is not returned, or access credentials are not removed from the systems. This is regular occurring problem in many institutions,  "This means that someone else could go into the system, and if they knew the person's login and password they would be able to access the system under the former employee's account."