physical security in information systems
How do you stop unauthorised physical access to information systems? How do you protect the security of the information systems assets themselves (e.g. computer rooms, laptops and disks)? The answers lies in physical security controls. The key controls you need to be aware of are summarised in this revision note.
Ensuring that there is a proper physical environment for systems, records and staff is essential for maintaining confidentiality, integrity and availability of information.
Management need to think about the following aspects of physical security:
(1) Protection
- of information and information systems from the elements is as important as protecting them from unauthorised people
- of physical access, which should be restricted to authorised personnel. IT
equipment is tempting to thieves, and can be damaged by accidents or sabotage
(2) Maintenance
- of the physical operating environment in a computer server room is as important
as ensuring that paper records are not subject to damage by fire or
flooding.
- of supporting equipment such as air conditioning plant or mains services
The main physical security controls are as follows:
Controlling Physical Access
The objective with physical access controls is to stop unauthorised people getting near to computer systems.
The key is to have a range of controls that include:
- Personnel (e.g. security) controlling human access
- Use of locks, key pads or car entry systems to sensitive computer locations
- Intruder alarms (detection)
Preventing Theft
Increasingly, computer equipment is smaller and lighter - which makes it easier to steal. So it makes sense for such equipment to be:
- Locked away when not in use
- Marked with identification (e.g. bar code / security code)
Physical Environment
The locations in which information systems are held also need to be protected. Measures include:
- Site preparation (e.g. materials that are fireproof)
- Detection equipment (e.g smoke detectors)
- Extinguishing equipment (e.g. sprinklers)
- Protection of power supplies (e.g. back up generator)
tutor2u is the leading global publisher of e-learning resources for Economics, Business, Politics, Enterprise, Law, Sociology, Religious Studies and related subjects. Our materials are used by over 3,500 schools and colleges in the UK and in educational institutions in over 85 other countries. tutor2u offers a range of free and subscription-based materials - designed to support teachers and inspire students. The business also runs a popular series of student revision workshops and teacher conferences. tutor2u was named Online Learning Resource of the Year at the prestigious BETT Show - the World's leading educational show.
|
Privacy & terms of Use |
Contact us |
Teacher Newsletters & Subject Blogs |
