Senior management of XYZ (Pty) Ltd is opting for ways in which they can improve the physical security and protection of its data center. The IS auditor has been asked to assist in this process by assessing the current environment and suggesting ways of improvement. The data center consists of 15 000 square feet of raising flooring on the ground floor of the corporate headquarters building. A total of 22 operations personnel require regular access. Currently, access to the data center is obtained using a proximity card, which is assigned to each authorised individual. There are three entrances to the data center, each of which utilises a card reader and has a camera monitoring the entrance. These cameras feed their signals to a monitor at the building reception desk, which cycles through these images along with views from other cameras inside and outside the building. Two of the doors to the data center also have key locks that bypass the electronic system so that a proximity card is not required for entry. Use of proximity cards is written to an electronic log. This log is retained for 45 days. During the review, the IS auditor noted that 64 proximity cards are currently active and issued to various personnel. The data center has no exterior windows, although one wall is glass and overlooks the entry foyer and reception area for the building. Required: 1. Critically analyse the scenario above and identify the risk associated with the current access control used in XYZ (Pty) Ltd (3) 2. Suggest the alternative access controls to XYZ Pty L(td) that minimize the risk discussed above and indicate the user acceptance of each suggested control. (8)