5.1 Physical security & access control

Physical security in a high-tech manufacturing environment is not simply about straightforward theft prevention; it is fundamentally about preserving the “Chain of Custody” for our clients’ invaluable Intellectual Property. A breach here compromises not just physical inventory, but the contractual integrity and trust of the entire operation. Think of facility access as a layered filtration system—each successive zone requires a higher level of authentication to enter, ensuring that only validated personnel can interact with the most sensitive assets.

Access control architecture (zoning)

The facility should be defined by its physical risk profile, not just by administrative departmental borders. Movement between these distinct security zones must be restricted and digitally logged at all times.

Zone 1: Public/Admin (Lobby, Offices): Access requires a standard RFID badge. When a visitor or external contractor arrives, a highly visible “Escort Required” badge (usually red or yellow) must be issued. As a fundamental rule, visitors must remain within a reasonable distance (e.g., 2 meters) of their designated host at all times.
Zone 2: Production Floor (SMT, PCBA): Access requires an RFID badge combined with robust Anti-Passback logic. Anti-passback prevents a badge from being used to enter a restricted zone twice without a corresponding, logged exit scan. This effectively stops “tailgating,” where one authorized badge improperly grants physical entry to multiple people.
Zone 3: Restricted (Server Room, High-Value Cage): Access here requires Multi-Factor Authentication (MFA), specifically combining an RFID badge with biometric verification (such as fingerprint or iris scanning). The critical rule in Zone 3 is that no single credential is ever sufficient to access these high-risk assets.

Surveillance (CCTV) standards

Cameras are primarily forensic tools; they are rarely effective as proactive, live monitors. Their true value lies in the ability to clearly reconstruct an event frame-by-frame after an incident has occurred.

Loading Dock & Entry Areas: Cameras covering these high-traffic zones must be capable of consistently capturing distinct facial IDs and vehicle license plates under various lighting conditions.
High-Value Areas (“The Cage”): Resolution in these specific areas should ideally be at least 4K (8MP) to clearly capture tiny part numbers on small component reels or labels.
Retention Policy: All footage must be stored for ≥ 90 Days on secure, redundant RAID arrays. A standard 30-day loop is often insufficient for investigating subtle inventory shrinkage that is typically only discovered during deferred quarterly financial audits.

High-value asset storage (“the cage”)

Processors, FPGAs, and high-density memory modules represent immense, easily resalable dense value. These must be stored in a physical enclosure that is structurally harder to breach than the main facility itself.

The Two-Person Rule: Whenever personnel are accessing the high-value cage, the Two-Person Rule must be enforced. The system logic should require that two distinct badges must scan simultaneously to release the magnetic lock. This structural requirement forces collusion, significantly raising the psychological and logistical barrier for internal, opportunistic theft.
Daily Cycle Counts: If the inventory in the cage represents the Top 10 Value SKUs, a Daily Cycle Count must be implemented. Any discrepancies must be rigorously investigated and resolved before the shift is allowed to end.

Intellectual property protection & imaging

Personal Devices: If entering Zone 2 (Production), personal smartphones and cameras must be Prohibited. Employees must store all such personal devices in secure lockers located in Zone 1 before crossing the boundary.
Privacy Masks: If CCTV fields of view inadvertently capture active computer monitors on the production floor, digital Privacy Masks must be applied within the camera software interface. Cameras must not record or legibly display sensitive CAD data, proprietary schematics, or customer BOMs.

Recap: Physical Security & Access Control

Zone / Area	Access / Surveillance Requirement	Key Technical Specification	Action / Condition
Zone 1: Public/Admin	Standard RFID badge	Visitor issued “Escort Required” badge	Visitor must remain within 2 meters of host
Zone 2: Production Floor	RFID badge with Anti-Passback	Personal smartphones/cameras prohibited	Devices stored in Zone 1 lockers
Zone 3: Restricted	Multi-Factor Authentication (RFID + Biometrics)	Two-Person Rule for high-value cage access	Door alarm if contact open >30 seconds
CCTV (High-Value Areas)	Minimum 4K (8MP) resolution	Footage retention ≥90 days	Privacy masks applied for sensitive monitor views
High-Value Asset Storage	Two-Person Rule (simultaneous badge scans)	Daily cycle count for Top 10 Value SKUs	Discrepancy resolved before shift end