What must be ensured regarding video cameras and access control mechanisms?

• A. They should be installed but not actively monitored.
• B. They are protected from tampering or disabling.
• C. They can be disabled if resources are constrained.
• D. Their data does not need protection.

Answer: (B)

Protecting physical security controls from tampering or disabling is essential because these mechanisms must reliably deter, detect, and provide evidence of unauthorized access. If someone can tamper with cameras or doors, or simply switch them off, the security system can be defeated, leaving sensitive areas unmonitored and PCI controls ineffective. To prevent this, video cameras and access control devices should be protected with measures like tamper-resistant housings, tamper-evident seals, secured power and network connections, restricted access to configuration, and active monitoring or alerting on device status. Data from these devices and their logs also require protection to maintain integrity and confidentiality. The other options fall short because they allow gaps in monitoring, enable disabling due to limited resources, or ignore the need to safeguard the devices and their data.