Read as
Why this module exists. Physical access control systems — badges, biometrics, PINs, and the combinations of these — are the perimeter for any facility holding sensitive data. This module covers the technology choices, the failure modes, and the practical deployment patterns for Indian enterprise environments.
Why this module exists. The badge that lets your employee into the building is often the only thing between an attacker and a network port in the lobby. The technology choice and operational discipline of access control determines whether the building is a perimeter or a suggestion.
The card-technology generations
| Technology | Cloneability | Recommendation |
|---|---|---|
| Magstripe | Trivial | Replace immediately |
| HID Prox (125 kHz) | Trivial (₹3000 reader) | Replace this year |
| Mifare Classic | Trivial (broken crypto) | Replace this year |
| Mifare DESFire EV2 / EV3 | Not feasible | Recommended baseline |
| HID iCLASS SE / Seos | Not feasible | Recommended baseline |
| Mobile credentials (NFC, BLE) | Not feasible (when implemented correctly) | Increasingly the standard for new builds |
The upgrade cost from cloneable to non-cloneable tech for a 1000-employee site is ₹15-30L (cards + reader replacement). The protection delta is structural.
Want this for your team?
Custom team training + practitioner advisory
Beyond the free academy — we run private workshops, vCISO advisory, and red-team exercises tailored to your stack. For Indian SMBs scaling past their first hire.
Book team training call
Replies in 4 working hrs · India-only · Senior consultants