Physical security for modern teams

APCAF checks whether physical security controls can resist known ways of bypassing them.

Learn APCAF Run a 45s assessment

45s Target Walk Budget

4 MVP Baseline Techniques

100% Passive & Non-Invasive

Cross-Walked to Selected Security & Building Standards

ISO 27001:2022 A.7 PCI DSS v4.0 Req 9 SOC 2 CC6.4 NIST SP 800-53 PE-3 NFPA 80 §6.3.1.7.1 ISO/IEC 14443-4

Methodology & Roadmap

The Field Validation Phase

APCAF's current MVP is designed around four non-invasive assessment techniques. The next phase is to execute these checks during real facility walks, document the observations, and publish anonymized field cases.

Demonstration Walkthrough

Hypothetical Assessment Scenario

STATUS: SYNTHETIC EXAMPLE (NO REAL FACILITY ASSESSED)

PHY-T1004 Technique Under Check

10 Seconds Target Inspection Budget

Passive LED Tool Required

Susceptible Simulated Finding

1. Scenario Context: A facility walk identifies an unmonitored physical Ethernet jack located in a public conference room or visitor reception area.

2. Passive Observation: Inserting a passive zero-packet LED link tester reveals active Layer 1 PHY carrier signaling in an unmonitored common area. (Note: Network-layer 802.1X quarantine verification requires independent authorized testing).

3. Framework Assessment: Classified as Legacy / Susceptible (Soft) against NIST SP 800-53 PE-3 and ISO 27001 A.8.20 specifications.

4. Specification Remediation: Administratively disable unassigned switch ports at the patch panel and enforce 802.1X Network Access Control (PHY-M1004).

The Framework Model

How APCAF Evaluates Controls

A standardised five-step evaluation chain applied under passive observation.

Step 01

Tactic

Portal Ingress
What the adversary wants to achieve.

Step 02

Technique

Latch Slip
How the control could be bypassed.

Step 03

Observation

Frame Gap > 3.2mm
What the assessor checks passively.

Step 04

Assessment

Susceptible (Soft)
Does the physical setup resist the technique?

Step 05

Remediation

Continuous Astragal
The engineering fix required.

Getting Started

Choose Your Pathway

Three purpose-built ways to engage with the APCAF standard.

1. Learn it • 15 Mins

I'm new to APCAF

A 6-lesson practical field guide. Learn why paper compliance fails, master the 5-step model, and test your skills in an interactive facility simulator.

Start Field Guide → 2. Use it • 45s Walk

I'm assessing a facility

Run the standardised 45-second physical triage workbench. Test credentials, frame tolerances, and port states to generate instant CISO warranty notices.

Launch 45s Field Triage → 3. Study it • Standards & Code

I want the specification

Explore technical taxonomy mappings, building and fire code citations (NFPA 80 / ANSI SDI / ISO 14443), and Atomic Red Team YAML specifications.

Read Technical Specification →

Taxonomy Baseline

The Four MVP Techniques

Standardised, repeatable checks executable across a 45-second direct read budget during routine site walks.

PHY-T1001 Credential Harvest

RFID Harvesting

Unencrypted 125 kHz Prox badges emit static identifiers without challenge authentication. Hardened by ISO 14443 AES-128 smartcards.

Inspect Technique →

PHY-T1002 Portal Ingress

Mechanical Latch Slip

Door frame gap exceeding NFPA 80 limit (> 3.2mm) without astragal latch shielding. Hardened by continuous steel astragal plates.

Inspect Technique →

PHY-T1003 Portal Ingress

REX Blind Activation

Unshielded wide-angle PIR sensor visible through threshold clearances. Hardened by directional deflector hoods.

Inspect Technique →

PHY-T1004 Interface & Tap

Network Port Tap

Publicly exposed wall jack broadcasting active L1 link without 802.1X NAC. Hardened by administrative port shutdown.

Inspect Technique →

Explore Full Rule Repository & YAML Specifications →