Physical Tailgating

Layer 1: Physical Medium risk

How it works

Tailgating, sometimes called piggybacking, happens when someone without a key or access card follows an authorized person into a building or restricted area. They may carry boxes, wear a delivery or contractor uniform, or simply act like they belong. Most people hold the door out of courtesy and feel awkward challenging a stranger. Delivery drivers, cleaners and maintenance workers are legitimately present in many offices, which makes impersonating them easy.

Once inside, an intruder can steal laptops or paper files, photograph screens and whiteboards, plug a device into a network port, or leave behind malicious USB drives. Small and shared offices are often more exposed because staff assume visitors belong to another tenant. Physical access can undo many digital protections in just a few minutes. Paper records such as client files, cheques and printed reports are just as attractive as digital data.

Warning signs

• Unfamiliar people inside without a visitor badge or escort
• Doors propped open or not closing fully
• Visitors claiming urgent deliveries or service calls without notice
• Missing equipment or documents
• Unknown devices plugged into network ports

How to defend against it

• Require visitor sign-in, badges and escorts
• Encourage staff to politely ask unfamiliar people who they are visiting
• Keep server rooms and network closets locked
• Lock screens and use a clean desk policy
• Disable unused network ports
• Include physical security in awareness training

If it happens to you

1. Notify building security or management right away
2. Check for missing devices, documents or unknown equipment
3. Review access logs and camera footage
4. Report stolen devices to IT for remote lock and wipe