What does sweeping for tampering entail?

• A. Systematically checking for tampering after an incident to ensure integrity.
• B. Physically cleaning surfaces.
• C. Replacing all locks.
• D. Issuing new badges to all personnel.

Answer: (A)

Sweeping for tampering is a methodical check of security controls to verify that nothing has been altered or inserted without authorization. After an incident or when compromise is suspected, you inspect all relevant devices and systems for signs of tampering—this includes physical components like seals, cables, hardware, cameras, locks, and access-control readers, as well as reviewing configuration settings, firmware, and system logs. The goal is to uncover evidence of unauthorized modifications, backdoors, or hidden devices and to confirm the integrity of the overall security posture so you can remediate and restore trust. This is about detection and verification, not cleaning surfaces, not replacing locks, and not issuing new badges, which are separate actions.