📖 What is Tailgating?
Tailgating is a physical security breach where an unauthorized person follows an authorized person into a secure area without providing their own credentials. This often occurs when a legitimate user holds the door open out of courtesy for someone behind them.
"To prevent tailgating, organizations use physical controls like mantraps (security vestibules) or employ security guards to monitor entry points."
📚 Certification: Certified in Cybersecurity (CC)
🔑 What are the Key Concepts of Tailgating?
- ▸ Tailgating is a form of social engineering that exploits human courtesy and social norms to bypass physical security perimeters without valid credentials.
- ▸ Physical access controls, such as electronic badge readers, are rendered ineffective when employees allow others to follow them through a secure door.
- ▸ Mantraps or security vestibules serve as a primary technical control by using a two-door system to isolate and verify individuals before granting entry.
- ▸ Security awareness training is an essential administrative control that teaches employees to prioritize security protocols over social politeness to prevent unauthorized access.
- ▸ Detective controls, including CCTV and security guards, are used to monitor entry points and identify tailgating incidents that bypass automated systems.
🎯 How does Tailgating appear on the CC Exam?
You may be asked to identify the specific social engineering technique being used when an attacker, perhaps carrying heavy boxes, tricks an employee into holding a secure door open, thereby bypassing the electronic badge reader.
A scenario might describe a facility requiring the highest level of physical security to prevent unauthorized entry. You will need to select the most effective control, such as a mantrap, to eliminate tailgating.
Expect questions that ask you to differentiate between tailgating and piggybacking, specifically focusing on whether the authorized person is aware of and consenting to the unauthorized person's entry.
❓ Frequently Asked Questions
What is the technical difference between tailgating and piggybacking?
Tailgating usually involves the attacker slipping in behind someone without their knowledge. Piggybacking occurs when the authorized person knowingly allows the unauthorized individual to enter, often out of a misplaced sense of courtesy or friendship.
Can electronic locks alone prevent tailgating?
No, electronic locks only control the initial opening of the door. Once the door is open, they cannot prevent a second person from entering. Physical barriers like mantraps or turnstiles are required for full prevention.