APCAF
ATT&CK PHYSICAL MATRIX v1.0
Adversarial Physical Control Assessment Framework - Non-Invasive QA & Vendor Warranty Engine
Audit Inspection Budget:
45 Seconds
PHY-TAC-01
Perimeter
PHY-T1010 Fence/Gate
PHY-T1011 Turnstile
PHY-TAC-02
Credential
PHY-T1001 RFID Harvest [MVP]
PHY-T1012 Relay Attack
PHY-TAC-03
Portal Ingress
PHY-T1002 Latch Slip [MVP]
PHY-T1003 REX Trip [MVP]
PHY-TAC-04
Containment
PHY-T1020 Rack Bypass
PHY-T1021 Cage Climb
PHY-TAC-05
Interface/Tap
PHY-T1004 Port Tap [MVP]
PHY-T1031 Console Tap
Case ID (Schema-Bound)
Facility Classification
Datacenter / Colocation Suite
Corporate HQ / Commercial Core
Financial / Cash Processing
Critical Infrastructure (SCADA/Ops)
Logistics Hub / Demarcation Zone
Facility Pseudo-ID (Anonymized)
PHY-T1001
Unencrypted RFID Harvesting
ISO 27001 A.7.2 • PCI DSS Req 9.2
5s Check • Pocket RFID Reader
Hardened (PHY-M1001)
Encrypted High-Frequency (AES-128 / DESFire EV2/EV3 / Seos / PKI Smartcard).
Legacy / Soft (Vulnerable)
Unencrypted 125 kHz Prox (HID Prox, EM4100) or MIFARE Classic CSN/UID-only.
Observed Spec & Location Telemetry
PHY-T1002 / T1003
Mechanical Latch & REX Sensor Manipulation
ISO 27001 A.7.4 • PCI DSS Req 9.1
30s Check • Visual & Metric Feeler
Hardened (PHY-M1002/M1003)
Continuous steel astragal plate guarding latch bolt; REX PIR sensor fitted with directional hood.
Legacy / Soft (Vulnerable)
Exposed latch bolt (gap > 3.2mm) with no astragal; direct line-of-sight to interior REX sensor.
Observed Spec & Location Telemetry
PHY-T1004
Unauthenticated Physical L1/L2 Network Tap
ISO 27001 A.8.20 • PCI DSS Req 9.1.2
10s Check • Passive LED Tester
Hardened (PHY-M1004)
Zero Layer 1 link state (port administratively shutdown, unpatched, or 802.1X enforced).
Legacy / Soft (Vulnerable)
Active PHY Layer 1/2 link indicator LED illuminates on unmonitored common area drop.
Observed Spec & Location Telemetry
Export STIX/YAML Case Record
Generate CISO Warranty Punch List
Generated Output
Copy Text