📘 Topic: Cable Locks and Physical Deterrents

Domain: D4 – Physical and Environmental Security
Tags: #cissp #physicalsecurity

---

🧾 Definition

Cable locks are physical deterrents used to secure portable devices (laptops, monitors) by mechanically attaching them to an immovable object; they are one element of physical security and asset protection.

---

🔑 Key Points

• Cable locks deter opportunistic theft but are not foolproof against determined attackers.
• Combine cable locks with asset tracking, access control, and CCTV for stronger protection.
• For data centers, stronger physical controls such as locked racks and controlled access are appropriate.

---

⚠️ CISSP Insight

• CISSP teaches layered physical controls: deterrence, detection, delay, and response. Cable locks are a low-cost deterrent but should be part of a broader physical security program.

---

⚔️ Key Difference / Trap

• Deterrent vs Preventive control
  • Cable locks deter casual theft but do not prevent all removal methods
• Trap: Relying solely on cable locks without access control or inventory reconciliation.

---

🏗️ Example

Workplace laptops are secured with cable locks in public areas, asset tags are logged, and security checks verify presence at the end of the day.

---

📚 References

• ISO/IEC 27001:2022 Annex A (Physical security)
• NIST SP 800-161 (Supply chain and physical security considerations)

---

🔁 Quick Recall

• Cable locks = cheap deterrent; use alongside access control and asset management