GICSP Practice Exam – SANS Global Industrial Cyber Security Professional Prep

A visitor management program is not considered an active technical control for physical security because it primarily involves administrative or procedural measures rather than technical ones. Active technical controls are those that utilize technology to enforce security measures, whereas a visitor management program focuses on the processes involved in managing guests and visitors. This typically includes tracking who enters and exits a facility, potentially using systems to register visitors or issue badges, but it does not actively control physical access on its own.

In contrast, biometric scanners, security guards, and card readers are all examples of active technical controls. Biometric scanners use physical characteristics (like fingerprints or facial recognition) to authenticate individuals and grant access, thereby actively controlling entry. Security guards provide a visible deterrent and can take immediate action, which falls under active security management, while card readers electronically verify access credentials, allowing or denying entry based on the authorization provided by the cardholder.