Physical assessment

When it applies

The engagement authorizes on-site testing (cleared via social-eng-methodology) with a defined objective — reach a floor/room, plug into the network, or drop test media — to measure physical access controls and staff response. Physical work has the highest real-world risk (police, injury, genuine alarm), so the guardrails are non-negotiable.

Why it works

Physical security leans on people extending courtesy (holding a door), trusting a uniform or a confident manner, and following habit over procedure. A tester with a plausible pretext and a hi-vis vest often walks past controls that are technically sound — the finding is the procedural/behavioral gap, captured with minimum intrusion.