[Figure: FiveStudy logo]
FiveStudy
Cybersecurity · Unit 2 · 2.4.b
AP Cybersecurity · Securing Spaces
Effective Placement of Detection Controls
Put each detector where its signal means something — not where there is space on the wall.
key ideaPlace a detector where its signal means something — not where there is space on the wall.
Matching controls to threats
Placement decides whether a control produces information or noise. The same motion sensor is excellent in a server room and worthless in a corridor, and the difference is entirely about whether movement there is expected.
| Control | Place it… | Because | Failure if misplaced |
|---|
| cameras | at points of entry, covering approach and face | entry is where identity is establishable | poor angle captures a shoulder, not a person |
| motion sensors | where traffic is unexpected — server rooms, sensitive stores | any movement is then meaningful | false alarms in busy areas kill credibility |
| locks | on all entries to areas with sensitive systems | one unlocked entry defeats the rest | a side door nobody listed |
| vestibule | at entries to particularly sensitive areas | physically prevents piggybacking and tailgating | expensive if applied everywhere |
| stationary guard | at a specific entrance or high-value item | constant protection for one place | leaves everywhere else uncovered |
| patrolling guard | across an area on a varying route | harder to plan around; creates time pressure | any given spot is unwatched most of the time |
Rows 5 and 6 are a genuine trade-off, not a ranking. Stationary gives certainty in one place; patrolling gives uncertainty everywhere — and uncertainty is what an adversary cannot plan around.
Layering
Camerasentry points, good angle, out of reach
Sensorswhere movement is unexpected
Guardsstationary for one thing, patrolling for many
[Figure: Coverage drawn as it actually falls. The shaded cones show what each camera sees, and the gaps between them are where placement, not equipment, decides whether an attack is detected.]
Coverage drawn as it actually falls. The shaded cones show what each camera sees, and the gaps between them are where placement, not equipment, decides whether an attack is detected.| Question to ask before mounting anything | Why it matters |
|---|
| What would this capture an adversary doing? | if the answer is ‘a back’, move it |
| Can it be reached and tampered with? | a camera at head height is a camera you will lose |
| Is movement here expected? | decides whether a motion sensor helps or harms |
| Is this the only entry? | locks on some entries protect nothing |
| Who receives the signal, and how fast? | an unrouted alert is not detection |
The last question is the one most often skipped. Placement is only half the design — the other half is where the signal goes and who is expected to act on it.
the placement rules
- For cameras, weigh coverage, angle, and resistance to tampering — and ask what the footage would actually show.
- Motion sensors belong where movement is unexpected; in high-traffic areas they generate alarms nobody believes.
- Locks go on all entries to a sensitive area — the weakest door sets the standard.
- Guards can be stationary or patrolling, and the choice changes what an adversary can plan for.
Worked analysis
EX 1
Place cameras for a small office
An office has a main entrance, a rear fire exit, a corridor, and a server room. Budget allows three cameras. Where do they go?
1
Start at points of entry
Main entrance and rear fire exit — entry is where identity can be captured.
2
Choose the third
The server room door, not the corridor: it protects the highest-value asset.
3
Set the angles
Facing toward approaching faces, not at backs walking away.
4
Consider tampering
Mount out of reach, with the cabling concealed.
5
Route the signal
Recorded and monitored, with motion-triggered alerts out of hours.
EX 2
Stationary or patrolling?
A site has one guard, a vault, and a large open floor. Which deployment, and why?
1
State the stationary case
Posted at the vault gives constant protection for the single highest-value item.
2
State the patrolling case
A varying route is harder to plan around and creates time pressure anywhere on the floor.
3
Identify the trade-off
Certainty in one place, against uncertainty everywhere.
4
Decide from the risk
If the vault dominates the risk register, post stationary. If theft is diffuse, patrol.
5
Note the hybrid
Stationary at the vault, with irregular patrols by a second person — if the budget ever allows two.
EX 3
The sensor in the wrong room
Motion sensors are installed in the staff kitchen and the archive room. Which is correctly placed?
1
Assess the kitchen
Constant expected traffic — every alert is a false alarm.
2
Assess the archive
Rarely entered, holds sensitive material — movement is genuinely unexpected.
3
Name the harm from the kitchen sensor
It teaches staff that the panel cries wolf, which degrades the archive alert too.
4
Recommend
Remove the kitchen sensor; keep and monitor the archive one.
5
Generalize
Fewer, better-placed sensors detect more than many badly placed ones.
Check yourself
What three things should be considered when placing a camera?
Show answer
Visual coverage, angle, and the ability to be tampered with — plus what the camera would actually capture an adversary doing, and how that helps. Points of entry are the priority locations.
Why not place motion sensors in high-traffic areas?
Show answer
They create many false alarms, which makes alarms less likely to be taken seriously when there is a real one. Place them where traffic is unexpected, such as server rooms.
Where should locks be placed?
Show answer
On all entries to areas containing sensitive information or systems — and for particularly sensitive areas, an access control vestibule at the entry point to prevent piggybacking and tailgating.
Compare stationary and patrolling guards.
Show answer
Stationary guards give constant protection to a specific area, entrance or high-value item. Patrolling guards are harder for an adversary to plan around and create time pressure.