Access control
A policy or physical or digital method that limits entry to a place, system, account, or resource to authorized people.
Plain-English definitions for terms used across physical security, fraud prevention, workplace procedures, environmental design, risk assessment, and recovery. Use the crime prevention questions and answers for a short explanation, or open the topic library for a complete action guide.
A policy or physical or digital method that limits entry to a place, system, account, or resource to authorized people.
Unauthorized control of an online account, often through stolen credentials, compromised recovery methods, or social engineering.
A rule, schedule, staffing practice, training process, or procedure used to reduce exposure to a hazard.
A structured review of what was intended, what happened, what helped, what failed, and what should change.
Information about conditions before an intervention, used to understand change over time.
A safe action by a witness to reduce harm, such as creating a distraction, asking for help, documenting when appropriate, or supporting the affected person.
Manipulating the name or number displayed for an incoming call so it appears to come from another source.
A possible shift in crime by place, time, target, method, or type after an intervention.
Actions that reduce the likelihood, opportunity, causes, or harm of crime before it occurs.
Crime Prevention Through Environmental Design, a place-based approach using access, visibility, maintenance, activity, and other environmental factors.
A lock bolt moved by a key or thumb turn rather than by spring action. Performance depends on the full door, frame, strike, and installation.
Using several independent controls so the failure of one does not remove all protection.
The intentional arrangement and management of physical space to support safe use, visibility, access, and community activity.
Protecting original records, objects, files, or scenes from alteration while documenting custody and necessary handling.
A notice on a credit file asking businesses to take steps to verify identity before opening new credit. Rules vary by jurisdiction.
Excessive brightness or contrast that reduces visual comfort or makes nearby details harder to see.
The presence or activity of people, staff, residents, systems, or routines capable of noticing and responding to a problem.
Steps that lessen the severity or consequences of a harmful event even when the event cannot be fully prevented.
Use of another person's identifying information without permission, commonly for fraud or account access.
An event that causes or could cause harm, loss, disruption, or a breach of a safety or security control.
A combination of physical, procedural, digital, and human controls that address different failure points.
A person working without close or direct supervision or immediate assistance, with risk depending on the task and setting.
Account login requiring evidence from more than one factor category, such as a password plus a device or biometric.
An event that did not cause the expected harm but revealed a hazard or failed control.
Design and activity that support ordinary observation of a place by legitimate users without relying only on cameras.
A social-engineering attempt using messages or websites to obtain credentials, money, data, or harmful actions.
A condition or resource associated with lower risk or greater resilience, such as supportive relationships or stable environments.
An email, phone, code, device, or process used to restore access to an account.
A structured process for identifying hazards or threats, exposure, existing controls, likely consequences, and priorities.
A route evaluated for the needs of its users, including crossings, visibility, accessibility, activity, transport, and help options.
A deceptive scheme intended to obtain money, information, access, or another benefit from a target.
Calm attention to the environment, changing conditions, observable behavior, and available options.
Manipulating people into providing information, access, money, or an action by exploiting trust, authority, urgency, or emotion.
Increasing the effort needed to access a target, such as improving locks or barriers, while considering safety and usability.
A person, condition, event, or action with the potential to cause harm. A threat is distinct from vulnerability and consequence.
A procedure requiring two authorized people to approve or complete a sensitive action.
Assigning responsibility for harm to the person targeted instead of the person who caused it.
A weakness or condition that could be used or fail, increasing the chance or consequence of harm.
Acts or threats of physical violence, harassment, intimidation, or other threatening behavior occurring at or connected to work.
A digital security approach that does not grant continuing trust solely because a user or device is inside a network.