Services · Red Team
Physical security testing in realistic and controlled conditions
A determined attacker does not always come in through the network: sometimes they walk in through the door. A physical intrusion test assesses your ability to prevent, detect and stop unauthorised access to your premises and sensitive assets. BEAROPS runs these exercises in real conditions, under a strict legal framework and prior written authorisation.
- Prior written authorisation
- Strict legal framework
- Field experts
- In French or English
Which controls does a physical intrusion test put to the test?
The exercise is not just about “getting in”. It tests the entire security chain: access control, staff vigilance, segregation of sensitive areas, detection and, above all, response. The real question is not only “can someone get in?”, but “how long before we spot and stop them?”.
| Control tested | Example of a weakness we look for |
|---|---|
| Access control | Clonable badge, door held open, bypassable airlock |
| Human factor | Tailgating, a pretext accepted without verification |
| Segregation | Sensitive area reachable from a common area |
| Detection and response | No alert, slow response, failing escalation procedure |
Realistic scenarios, defined with you
Each scenario is chosen and authorised with you before the exercise: misused visitor access, a delivery, a maintenance contractor, placing test equipment in a sensitive area. The objective remains concrete, for example reaching a server room or an unlocked workstation. No scenario is played out without prior written approval.
A legally sensitive exercise, rigorously governed
Entering premises, even under mandate, touches on property law, employment law and the privacy of the people present. Every engagement rests on an authorisation letter signed by a person with authority, precise rules of engagement, a named list of the testers and an emergency stop procedure. This preparation is a prerequisite for launching the exercise.
How does a physical intrusion test unfold?
-
Scoping
Objective, sites concerned, authorised scenarios, people informed.
-
Authorisation
Engagement letter, rules of engagement, emergency contacts.
-
Reconnaissance
External observation and preparation, without intrusion.
-
Execution
Access attempts following the approved scenarios, time-stamped evidence.
-
Reporting
Report, evidence, prioritised remediation plan.
People’s safety comes before the objective
A tester who identifies themselves when asked by a guard, an immediate stop procedure, a client-side contact reachable at all times: the exercise is designed never to endanger people or disrupt critical operations. When in doubt, the engagement stops; the objective comes second to safety.
What do you receive at the end of the test?
-
Detailed report
The access obtained and the controls bypassed, described step by step. -
Time-stamped evidence
The material that proves each access, presented discreetly and with respect for the people involved. -
Remediation plan
The measures to take, prioritised by severity and effort. -
Oral debrief
A session with your security and safety teams to go through each finding.
One vector among three
Physical intrusion is often combined with social engineering and cyber intrusion within a single Red Team exercise , when the objective warrants it. Physical access can open up access to the system, and vice versa. We define together the vectors relevant to your objective.
Frequently asked questions
Is a physical intrusion test legal?
Yes, provided it is rigorously governed. It rests on an authorisation letter signed by a person empowered to bind the organisation, precise rules of engagement and a named list of the testers. Without this prior written authorisation, no exercise is launched.
Will our employees be told?
That depends on the objective. To test the real response, some teams are not informed, but a small circle of managers always is, and an authorisation letter allows the tester to identify themselves immediately if necessary. People’s safety comes first in all circumstances.
Is there a risk of damaging our premises or disrupting operations?
No. The exercise rules out any damage and any disruption to critical operations. An immediate stop procedure and a contact reachable at all times govern the engagement. When in doubt, the exercise stops.
How does it differ from a conventional security audit?
An audit reviews your measures on paper and on site, openly. A physical intrusion test puts those measures to the test in real conditions, without warning operational teams, to measure actual detection and response, not just their theoretical existence.
Let’s scope your physical intrusion test
Describe the sites and the objective to be tested. A BEAROPS expert will call you back to define the authorised scenarios, the legal framework and the quote.