How can social engineering be mitigated in physical security?

• A. Training, policy enforcement, verification procedures, and strict visitor controls.
• B. Rely on employee memory for visitor checks.
• C. Remove all security staff to avoid confrontation.
• D. Allow access to anyone who shows a badge.

Answer: (B)

Mitigating social engineering in physical security relies on creating consistent, security-minded behavior plus solid process controls. Training equips people to recognize manipulation tactics like impersonation, pretexting, or pressure to bypass procedures. Policy enforcement establishes clear rules for verification, reporting, and handling unusual requests, so everyone follows the same safe routines. Verification procedures—such as confirming identities, validating the purpose of visits, and requiring escorts or guest logs—provide concrete checks that reduce reliance on memory or gut instinct. Strict visitor controls put those rules into practice by limiting where visitors can go, who can access what areas, and how access rights are managed. Together, these measures create layered defenses that make it much harder for a social engineer to succeed. Relying on memory, removing security staff, or granting blanket access with a badge all weaken those defenses and increase risk.