{"id":42,"date":"2026-09-11T18:40:55","date_gmt":"2026-09-11T18:40:55","guid":{"rendered":"https:\/\/xeonsecurity.com\/xeon-blog\/?p=42"},"modified":"2026-09-11T19:35:09","modified_gmt":"2026-09-11T19:35:09","slug":"guide-to-physical-security-controls-planning-policies-and-measures","status":"publish","type":"post","link":"https:\/\/xeonsecurity.com\/xeon-blog\/2026\/09\/11\/guide-to-physical-security-controls-planning-policies-and-measures\/","title":{"rendered":"Guide to Physical Security Controls, Planning, Policies, and Measures"},"content":{"rendered":"\n<p class=\"wp-block-paragraph\">Physical security is the set of people, places, procedures, and technologies that keep unauthorized people away from assets that matter: people, property, operations, and evidence. Cameras are only one layer. A complete program starts with risk, then stacks controls so that if one layer fails, the next one still works.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">This guide covers what those controls are, how to plan them, which policies make them enforceable, and how measures should be applied from the property line inward. It is written for facility owners, operations managers, and security leads who need a working framework\u2014not a product catalog.<\/p>\n\n\n\n<hr class=\"wp-block-separator has-alpha-channel-opacity\"\/>\n\n\n\n<h2 class=\"wp-block-heading\">What physical security actually is<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">Physical security has three jobs:<\/p>\n\n\n\n<ol class=\"wp-block-list\">\n<li><strong>Protect people<\/strong> \u2014 staff, residents, visitors, contractors.<\/li>\n\n\n\n<li><strong>Protect property and operations<\/strong> \u2014 buildings, inventory, vehicles, equipment, critical infrastructure.<\/li>\n\n\n\n<li><strong>Protect information and evidence<\/strong> \u2014 server rooms, records, footage, chain of custody.<\/li>\n<\/ol>\n\n\n\n<p class=\"wp-block-paragraph\">It is not the same as cybersecurity, but the two should meet. A badge reader that is not logged, a camera that is not recorded, or a door that is propped open will defeat both.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">A useful way to think about any site is <strong>defense in depth<\/strong>: multiple independent layers so an adversary must defeat several distinct obstacles, not one lock or one camera.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">The operational functions those layers serve are often described as:<\/p>\n\n\n\n<figure class=\"wp-block-table\"><table class=\"has-fixed-layout\"><thead><tr><th>Function<\/th><th>Purpose<\/th><\/tr><\/thead><tbody><tr><td><strong>Deter<\/strong><\/td><td>Make the site look hard to attack (lighting, fencing, visible cameras, signage, patrols).<\/td><\/tr><tr><td><strong>Detect<\/strong><\/td><td>Know something is happening in time (sensors, CCTV, analytics, alarms, people).<\/td><\/tr><tr><td><strong>Delay<\/strong><\/td><td>Slow the attacker so response can arrive (locks, barriers, vestibules, reinforced doors).<\/td><\/tr><tr><td><strong>Deny \/ defend<\/strong><\/td><td>Stop unauthorized access at defined points (access control, mantraps, guards).<\/td><\/tr><tr><td><strong>Respond<\/strong><\/td><td>Verify, intervene, and document (monitoring, intercom, procedures, law enforcement).<\/td><\/tr><tr><td><strong>Recover<\/strong><\/td><td>Restore operations and preserve evidence after an incident.<\/td><\/tr><\/tbody><\/table><\/figure>\n\n\n\n<p class=\"wp-block-paragraph\">If you only buy cameras and skip delay and response, you get a recording of a crime. If you only buy fences and skip detection, you get a cut fence you notice the next morning.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\">Types of physical security controls<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">Controls fall into four families. A mature program uses all four.<\/p>\n\n\n\n<h3 class=\"wp-block-heading\">1. Architectural and environmental controls (CPTED)<\/h3>\n\n\n\n<p class=\"wp-block-paragraph\">Crime Prevention Through Environmental Design uses the built environment itself as a control.<\/p>\n\n\n\n<ul class=\"wp-block-list\">\n<li><strong>Natural surveillance<\/strong> \u2014 sightlines, window placement, reduced hiding spots, cameras that actually see what people can see.<\/li>\n\n\n\n<li><strong>Natural access control<\/strong> \u2014 defined paths, limited entry points, landscaping that channels movement instead of hiding it.<\/li>\n\n\n\n<li><strong>Territorial reinforcement<\/strong> \u2014 fencing, pavement changes, signage, and landscaping that make private space feel owned.<\/li>\n\n\n\n<li><strong>Maintenance<\/strong> \u2014 broken lights, overgrown hedges, and damaged fences signal that no one is watching.<\/li>\n<\/ul>\n\n\n\n<p class=\"wp-block-paragraph\">CPTED is cheap compared with electronics and should be designed in before you specify hardware.<\/p>\n\n\n\n<h3 class=\"wp-block-heading\">2. Mechanical and barrier controls<\/h3>\n\n\n\n<p class=\"wp-block-paragraph\">These delay and deny.<\/p>\n\n\n\n<ul class=\"wp-block-list\">\n<li>Perimeter: fences, walls, gates, vehicle barriers, bollards, anti-ram landscaping.<\/li>\n\n\n\n<li>Building envelope: rated doors, frames, locks, window film, roof access control, hatch locks.<\/li>\n\n\n\n<li>Interior: high-security locks, safes, cages, server-room enclosures, key control cabinets.<\/li>\n\n\n\n<li>Vehicle: rising arm barriers, sliding gates, tire shredders (high-risk sites only), designated loading-dock controls.<\/li>\n<\/ul>\n\n\n\n<p class=\"wp-block-paragraph\">Barriers without detection are delay without warning. Pair them.<\/p>\n\n\n\n<h3 class=\"wp-block-heading\">3. Electronic and technical controls<\/h3>\n\n\n\n<p class=\"wp-block-paragraph\">These detect, identify, and log.<\/p>\n\n\n\n<ul class=\"wp-block-list\">\n<li><strong>Video surveillance (CCTV)<\/strong> \u2014 the verification layer. Modern systems add AI classification (person vs. vehicle vs. animal), line-crossing, loitering, abandoned-object, LPR, and in some deployments facial or behavioral analytics. Resolution and lens choice should follow a purpose: detect, observe, recognize, or identify (DORI).<\/li>\n\n\n\n<li><strong>Access control<\/strong> \u2014 cards, fobs, PINs, mobile credentials, biometrics, anti-passback, scheduled unlocks, door-forced and door-held alarms.<\/li>\n\n\n\n<li><strong>Intrusion detection<\/strong> \u2014 door\/window contacts, glass-break, motion, fence vibration, buried cable, beam towers, radar, thermal.<\/li>\n\n\n\n<li><strong>Lighting<\/strong> \u2014 uniform coverage, no deep shadows at doors and paths, lighting coordinated with camera IR\/low-light performance.<\/li>\n\n\n\n<li><strong>Intercom and audio<\/strong> \u2014 talk-down at gates and perimeters; synchronized audio with video for evidence.<\/li>\n\n\n\n<li><strong>Environmental sensors<\/strong> \u2014 water, temperature, power, and fire tied into the same operations picture where relevant.<\/li>\n<\/ul>\n\n\n\n<p class=\"wp-block-paragraph\">Technical controls only work if power, network, recording, and time sync are designed as part of the system\u2014not as afterthoughts.<\/p>\n\n\n\n<h3 class=\"wp-block-heading\">4. Human and procedural controls<\/h3>\n\n\n\n<p class=\"wp-block-paragraph\">Technology fails if people do not use it.<\/p>\n\n\n\n<ul class=\"wp-block-list\">\n<li>Security officers and mobile patrols<\/li>\n\n\n\n<li>Reception and visitor processing<\/li>\n\n\n\n<li>Key and credential issuance<\/li>\n\n\n\n<li>After-hours escort rules<\/li>\n\n\n\n<li>Contractor and delivery procedures<\/li>\n\n\n\n<li>Training and drills<\/li>\n\n\n\n<li>Monitoring (on-site or remote)<\/li>\n<\/ul>\n\n\n\n<p class=\"wp-block-paragraph\">People close the loop: they verify alarms, challenge strangers, and execute the response plan.<\/p>\n\n\n\n<hr class=\"wp-block-separator has-alpha-channel-opacity\"\/>\n\n\n\n<h2 class=\"wp-block-heading\">Planning: how to design the program before you buy hardware<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">Skip \u201chow many cameras?\u201d as the first question. Start with assets and threats.<\/p>\n\n\n\n<h3 class=\"wp-block-heading\">Step 1 \u2014 Scope the site and the assets<\/h3>\n\n\n\n<p class=\"wp-block-paragraph\">List what you are protecting and where it lives:<\/p>\n\n\n\n<ul class=\"wp-block-list\">\n<li>People (hours on site, lone workers, public access)<\/li>\n\n\n\n<li>High-value inventory and equipment<\/li>\n\n\n\n<li>Critical rooms (IT, electrical, pharmacy, cash, evidence)<\/li>\n\n\n\n<li>Vehicles and yards<\/li>\n\n\n\n<li>Utilities and perimeter approaches<\/li>\n\n\n\n<li>Neighboring risk (alley, rail, vacant lots, shared parking)<\/li>\n<\/ul>\n\n\n\n<p class=\"wp-block-paragraph\">Map public, controlled, restricted, and exclusion zones. Design from the inside out: the most sensitive room sets the highest standard; outer layers exist to protect that standard.<\/p>\n\n\n\n<h3 class=\"wp-block-heading\">Step 2 \u2014 Threat and vulnerability assessment<\/h3>\n\n\n\n<p class=\"wp-block-paragraph\">Identify realistic threats for <em>this<\/em> property, not a generic list:<\/p>\n\n\n\n<ul class=\"wp-block-list\">\n<li>Opportunistic theft and trespass<\/li>\n\n\n\n<li>After-hours break-in<\/li>\n\n\n\n<li>Tailgating and social engineering<\/li>\n\n\n\n<li>Vehicle-borne intrusion or ramming<\/li>\n\n\n\n<li>Internal theft and collusion<\/li>\n\n\n\n<li>Vandalism and protest<\/li>\n\n\n\n<li>Workplace violence<\/li>\n\n\n\n<li>For industrial sites: copper theft, yard intrusion, safety-compliance gaps<\/li>\n<\/ul>\n\n\n\n<p class=\"wp-block-paragraph\">Walk the site at night. Note dark corners, climbable fences, roof access, dumpster placement, and doors that get propped. Interview operations staff\u2014they already know the real workarounds.<\/p>\n\n\n\n<h3 class=\"wp-block-heading\">Step 3 \u2014 Define security objectives per zone<\/h3>\n\n\n\n<p class=\"wp-block-paragraph\">For each zone, write what success looks like:<\/p>\n\n\n\n<ul class=\"wp-block-list\">\n<li>Public parking: detect vehicle and person movement after hours; lighting that supports cameras.<\/li>\n\n\n\n<li>Lobby: identify everyone who enters; visitor log; no unescorted access past reception.<\/li>\n\n\n\n<li>Warehouse floor: cover docks and high-value aisles; LPR at gates if vehicles matter.<\/li>\n\n\n\n<li>Server \/ secure room: two-factor access, door monitoring, camera covering the door and interior without creating privacy issues.<\/li>\n<\/ul>\n\n\n\n<h3 class=\"wp-block-heading\">Step 4 \u2014 Select layered measures<\/h3>\n\n\n\n<p class=\"wp-block-paragraph\">Match controls to functions. Example for a commercial warehouse:<\/p>\n\n\n\n<figure class=\"wp-block-table\"><table class=\"has-fixed-layout\"><thead><tr><th>Layer<\/th><th>Deter<\/th><th>Detect<\/th><th>Delay<\/th><th>Respond<\/th><\/tr><\/thead><tbody><tr><td>Property line<\/td><td>Fence, lighting, signage<\/td><td>Thermal \/ analytic cameras, fence sensors<\/td><td>Fence height, anti-climb, gates<\/td><td>Talk-down, patrol, police<\/td><\/tr><tr><td>Yard \/ docks<\/td><td>Marked vehicle lanes<\/td><td>LPR, dock cameras, motion<\/td><td>Locked dock doors after hours<\/td><td>Intercom, remote verification<\/td><\/tr><tr><td>Building entry<\/td><td>Visible cameras, lighting<\/td><td>Access control, door contacts<\/td><td>Rated doors, delayed egress where code allows<\/td><td>Reception \/ remote operator<\/td><\/tr><tr><td>Interior high-value<\/td><td>Restricted signage<\/td><td>Interior cameras, motion<\/td><td>Cages, lockers<\/td><td>Supervisory review of events<\/td><\/tr><\/tbody><\/table><\/figure>\n\n\n\n<h3 class=\"wp-block-heading\">Step 5 \u2014 Design for operations, not just install day<\/h3>\n\n\n\n<p class=\"wp-block-paragraph\">Specify:<\/p>\n\n\n\n<ul class=\"wp-block-list\">\n<li>Who watches live video, and when<\/li>\n\n\n\n<li>What happens when an analytic fires at 2:14 a.m.<\/li>\n\n\n\n<li>Retention period and who can export footage<\/li>\n\n\n\n<li>Power backup and network failover<\/li>\n\n\n\n<li>Maintenance, firmware, and cleaning schedule<\/li>\n\n\n\n<li>How new employees get credentials\u2014and how terminated employees lose them the same day<\/li>\n<\/ul>\n\n\n\n<p class=\"wp-block-paragraph\">A system that no one owns after handover will drift into false alarms and ignored events.<\/p>\n\n\n\n<h3 class=\"wp-block-heading\">Step 6 \u2014 Document, test, and review<\/h3>\n\n\n\n<p class=\"wp-block-paragraph\">Write the plan. Tabletop the after-hours intrusion. Test door-forced alarms. Review events monthly. Reassess after renovations, tenancy changes, or incidents.<\/p>\n\n\n\n<hr class=\"wp-block-separator has-alpha-channel-opacity\"\/>\n\n\n\n<h2 class=\"wp-block-heading\">Policies that make controls enforceable<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">Hardware without policy is decoration. At minimum, publish and train on:<\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><strong>Physical security policy<\/strong><br>Who owns the program, which sites are in scope, and that controls must not be bypassed (propped doors, shared badges, disabled cameras).<\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><strong>Access control and credential policy<\/strong><br>Who is authorized where; visitor vs. contractor vs. employee; escort rules; lost-badge reporting; immediate deprovisioning on termination; no \u201cgeneric\u201d shared logins on NVRs or door controllers.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><strong>Visitor and vendor management<\/strong><br>Pre-registration where possible, ID check, temporary credential, escort in restricted zones, badge return.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><strong>Key and lock control<\/strong><br>Inventory of keys and cores, dual control for high-security keys, documented rekey after loss.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><strong>Surveillance and privacy policy<\/strong><br>Where cameras may and may not be placed (no bathrooms, locker rooms, or areas creating a reasonable expectation of privacy), how long footage is kept, who may view or export it, and how requests from law enforcement or HR are handled.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><strong>Incident response and evidence handling<\/strong><br>Who is called, in what order; how video is preserved (do not overwrite); chain of custody for exports; when to involve police.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><strong>Acceptable use and workplace rules<\/strong><br>Tailgating is a policy violation, not a joke. After-hours access is logged. Personal visitors follow the same process as business visitors.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><strong>Maintenance and change control<\/strong><br>No one moves a camera or changes a lock schedule without a record. Firmware and passwords are managed.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Policies should be short enough that supervisors will actually enforce them.<\/p>\n\n\n\n<hr class=\"wp-block-separator has-alpha-channel-opacity\"\/>\n\n\n\n<h2 class=\"wp-block-heading\">Measures by layer (practical catalog)<\/h2>\n\n\n\n<h3 class=\"wp-block-heading\">Perimeter and site<\/h3>\n\n\n\n<ul class=\"wp-block-list\">\n<li>Clear property line and \u201cprivate property \/ video surveillance\u201d signage<\/li>\n\n\n\n<li>Fence appropriate to threat (ornamental vs. anti-climb industrial)<\/li>\n\n\n\n<li>Controlled vehicle gates with intercom and camera<\/li>\n\n\n\n<li>Lighting that is even, not just bright at the building<\/li>\n\n\n\n<li>Landscaping kept below sightlines<\/li>\n\n\n\n<li>Camera coverage of approaches, not only doors<\/li>\n\n\n\n<li>For higher risk: thermal or radar for large open ground, fence-mounted detection<\/li>\n<\/ul>\n\n\n\n<h3 class=\"wp-block-heading\">Building envelope<\/h3>\n\n\n\n<ul class=\"wp-block-list\">\n<li>Minimum number of unlocked public doors<\/li>\n\n\n\n<li>Access-controlled staff entries<\/li>\n\n\n\n<li>Door position and request-to-exit monitored<\/li>\n\n\n\n<li>Windows and roof hatches treated as entries<\/li>\n\n\n\n<li>Loading docks locked when not in active use<\/li>\n\n\n\n<li>Camera views of every door that can be used after hours<\/li>\n<\/ul>\n\n\n\n<h3 class=\"wp-block-heading\">Interior<\/h3>\n\n\n\n<ul class=\"wp-block-list\">\n<li>Zone-based access (public \/ staff \/ restricted)<\/li>\n\n\n\n<li>Cameras at choke points: corridors to high-value rooms, cash, IT, pharmacies<\/li>\n\n\n\n<li>Storage of high-theft items out of public view<\/li>\n\n\n\n<li>Panic or duress devices where staff face the public<\/li>\n\n\n\n<li>Clear desk and clean inventory practices so theft is visible<\/li>\n<\/ul>\n\n\n\n<h3 class=\"wp-block-heading\">People and process<\/h3>\n\n\n\n<ul class=\"wp-block-list\">\n<li>Reception or remote verification during business hours<\/li>\n\n\n\n<li>After-hours monitoring or scheduled patrols<\/li>\n\n\n\n<li>Training: challenge strangers, report propped doors, do not hold doors<\/li>\n\n\n\n<li>Drills for lockdown, medical, and after-hours alarm<\/li>\n<\/ul>\n\n\n\n<h3 class=\"wp-block-heading\">Electronic backbone<\/h3>\n\n\n\n<ul class=\"wp-block-list\">\n<li>Encrypted video and access traffic<\/li>\n\n\n\n<li>Local recording with defined retention plus off-site or redundant copy for critical cameras<\/li>\n\n\n\n<li>Accurate time sync (evidence is worthless if clocks disagree)<\/li>\n\n\n\n<li>UPS and generator consideration for recorders and critical cameras<\/li>\n\n\n\n<li>Role-based access to the VMS; no shared admin passwords<\/li>\n<\/ul>\n\n\n\n<hr class=\"wp-block-separator has-alpha-channel-opacity\"\/>\n\n\n\n<h2 class=\"wp-block-heading\">Where video and analytics belong in the stack<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">Surveillance is not a substitute for locks. It is the layer that turns \u201csomething happened\u201d into \u201cwe know who, when, and how.\u201d<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Used well, CCTV and analytics should:<\/p>\n\n\n\n<ul class=\"wp-block-list\">\n<li>Cover the approaches an offender must use<\/li>\n\n\n\n<li>Support identification at points where identity matters (entries, docks, cash)<\/li>\n\n\n\n<li>Reduce noise with classification so operators are not drowning in leaf-and-headlight alarms<\/li>\n\n\n\n<li>Give operators talk-down and evidence in the same workflow<\/li>\n\n\n\n<li>Integrate with access events (door forced + camera popup)<\/li>\n<\/ul>\n\n\n\n<p class=\"wp-block-paragraph\">Used poorly, cameras are pointed at the sky, underspecified for night, unmaintained, or stored for three days on a full disk. Planning optics, lighting, bandwidth, and retention is part of physical security\u2014not an IT side quest.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">For industrial and large commercial sites, the usual gaps are perimeter depth (too few cameras trying to cover too much ground), docks left dark, and no defined response when an analytic fires. Those are planning problems, not camera-brand problems.<\/p>\n\n\n\n<hr class=\"wp-block-separator has-alpha-channel-opacity\"\/>\n\n\n\n<h2 class=\"wp-block-heading\">A simple implementation sequence<\/h2>\n\n\n\n<ol class=\"wp-block-list\">\n<li>Walk the site and write assets, zones, and threats.<\/li>\n\n\n\n<li>Fix the free and cheap items: lighting, sightlines, lock discipline, signage, propped-door culture.<\/li>\n\n\n\n<li>Close the envelope: doors, gates, keys, access control.<\/li>\n\n\n\n<li>Place detection where delay already exists so you get warning <em>and<\/em> time.<\/li>\n\n\n\n<li>Write the policies and the after-hours playbook before go-live.<\/li>\n\n\n\n<li>Train, test, and assign an owner.<\/li>\n\n\n\n<li>Review after 30 and 90 days against real events, not the sales drawing.<\/li>\n<\/ol>\n\n\n\n<hr class=\"wp-block-separator has-alpha-channel-opacity\"\/>\n\n\n\n<h2 class=\"wp-block-heading\">Common failure modes<\/h2>\n\n\n\n<ul class=\"wp-block-list\">\n<li>One impressive camera at the front door and a dark rear yard<\/li>\n\n\n\n<li>Access control installed, credentials never revoked<\/li>\n\n\n\n<li>Analytics enabled on every camera with no tuning, then disabled after a week of false alarms<\/li>\n\n\n\n<li>Recorders with no UPS; clocks wrong; footage overwritten before anyone asks<\/li>\n\n\n\n<li>Policies written once for insurance and never trained<\/li>\n\n\n\n<li>Security design that fights fire code or operations, so staff disable it<\/li>\n<\/ul>\n\n\n\n<p class=\"wp-block-paragraph\">Physical security fails at the seams: between vendor and IT, between day shift and night shift, between the fence and the first camera.<\/p>\n\n\n\n<hr class=\"wp-block-separator has-alpha-channel-opacity\"\/>\n\n\n\n<h2 class=\"wp-block-heading\">Closing<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">A durable physical security program is a system: environment, barriers, electronics, people, and written rules, arranged in layers that deter, detect, delay, and respond. Start with what you must protect and who might try to take it. Choose measures that give you time and information. Then operate the system as if someone will test it\u2014because someone will.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">If you are scoping a site and need the detection and verification layer designed against real distances, lighting, and operations\u2014not a generic camera count\u2014that planning belongs in the same conversation as fences and policies, not after them.<\/p>\n","protected":false},"excerpt":{"rendered":"<p>Physical security is the set of people, places, procedures, and technologies that keep unauthorized people away from assets that matter: people, property, operations, and evidence. Cameras&hellip;<\/p>\n","protected":false},"author":1,"featured_media":43,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[14,16,18,11,5],"tags":[17],"class_list":["post-42","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-privacy","category-security","category-surveillance","category-technology","category-xeon","tag-protection"],"_links":{"self":[{"href":"https:\/\/xeonsecurity.com\/xeon-blog\/wp-json\/wp\/v2\/posts\/42","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/xeonsecurity.com\/xeon-blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/xeonsecurity.com\/xeon-blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/xeonsecurity.com\/xeon-blog\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/xeonsecurity.com\/xeon-blog\/wp-json\/wp\/v2\/comments?post=42"}],"version-history":[{"count":1,"href":"https:\/\/xeonsecurity.com\/xeon-blog\/wp-json\/wp\/v2\/posts\/42\/revisions"}],"predecessor-version":[{"id":44,"href":"https:\/\/xeonsecurity.com\/xeon-blog\/wp-json\/wp\/v2\/posts\/42\/revisions\/44"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/xeonsecurity.com\/xeon-blog\/wp-json\/wp\/v2\/media\/43"}],"wp:attachment":[{"href":"https:\/\/xeonsecurity.com\/xeon-blog\/wp-json\/wp\/v2\/media?parent=42"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/xeonsecurity.com\/xeon-blog\/wp-json\/wp\/v2\/categories?post=42"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/xeonsecurity.com\/xeon-blog\/wp-json\/wp\/v2\/tags?post=42"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}