CISSP 9.3 - Assess & Mitigate Vulnerabilities of Security Architectures (Part 3 of 3)

This episode of the ISC2 Certified Information Systems Security Professional (CISSP) exam prep series closes the Domain 3 hardware tour with the physical-layer risks that slip past software controls — the leaks no firewall rule will ever catch. It covers how data escapes through discarded media, stray signals, and everyday peripherals, and why the code that boots a machine deserves special protection.

Frequently Asked Questions

How do you truly secure secondary storage media?

Deleting is not erasing: data can linger on a drive even after a delete or a reformat, a problem called data remanence, and recovery tools can pull it right back. To really remove it, you sanitize by overwriting every trace or physically destroy the media, keeping in mind that solid-state drives spread writes through wear leveling and reserved blocks, so a simple wipe may miss data hiding in retired cells. Since drives are easy to steal and the real loss is the confidential data, full-disk encryption is your safety net, and removable media deserve the same care.

How can stray electronic signals leak your data?

Monitors, cables, drives, and wireless gear all radiate electromagnetic energy that may carry confidential content, and with the right equipment an adversary can read those signals from a distance. The countermeasures form a discipline known as emission security: a Faraday cage wraps an area in a conductive skin that blocks signals, white noise floods the space with masking signals so real emanations drown in the clutter, and a control zone applies both to just one room or floor. Shielding cables, or swapping copper for fiber, helps too.

Which everyday input and output devices carry hidden risk?

All of them, in ways teams routinely overlook. Monitors leak through the video signal, but the bigger danger is often shoulder surfing or a hidden camera; printers store copies on internal drives and networked multifunction units can be reached through old fax and modem pathways. Keyboards and mice can be tapped by a tiny bug on the cable or by intercepting their wireless signal, and legacy telephone modems open an uncontrolled backdoor that belongs under a strict policy or an outright ban.

Why is firmware such a tempting target?

Firmware is the low-level code that boots your device, and whoever controls it controls the machine before defenses even load. Updating it is called flashing, which attackers abuse in a phlashing attack by installing a poisoned firmware image with hidden remote control or malicious features. Modern defenses are built in: secure boot, also called boot attestation, refuses to load any driver or operating system without a trusted digital signature, while measured boot hashes every element of the boot sequence into a trusted platform module so you can compare against known-good values later.

Reference: This article is based on concepts discussed in CISSP 9.3 - Assess & Mitigate Vulnerabilities of Security Architectures (Part 3 of 3).