• implementation/practice of control mech. intended to restrict phys. access to facilities
• devices
• communication
• building
• circuits

• Physical Plant HVAC, Electrical lines, fire detection, lighting, doors, windows, plumbing
• Computer Facilities server rooms, data centers
• Data Network network HD/SW, wiring (routers, switch, FW)
• Personnel electronic/physical attacks against personnel

• Internal physical/logical threats from w/in org.  disgruntled EE
• External External to org; ext power failure combatted by UPS, battery, generator
• Natural natural disasters
• Man-made internal/external; caused by human error/intent

• Perimeter Access 1st layer; fences/gates/instrusion detection
• Facility Access 2nd layer; locks/doors; limiting access to only authorized personnel
• Secured Area Access 3rd layer; secured doors/locks/strengthend walls;  limiting access to highly sensitive information/assets

• Fencing
• Walls
• Doors
• Windows
• Lighting Visibility for guards/cameras; deterrent to intruders - IDS turns on light w/motion detection

• Key
• Deadbolt
• Keyless keypad/push button
• Combination safe/vault
• Device Locks cable locks/port controls; key/keyless

• Automatic AC cipher keypads/AC cards open electronically controlled door locks/log access
• Card Entry Sys Magnetic striped cards/proximity cards
• Biometric Entry
  
• Security Guards
  
• Man traps physical entry portal w/2 doors to trap; outer door opens before inner door
• IDS infrared sensor, sound sensor, motion detectors
• Alarms/responses

support information services combo'd w/physical security processes

• Entry restriction ID/auth
• Intrustion Detection Unauth access alerts; repeated attempts to door w/incorrect ID/auth
• Activity Logging activity logs for entry/exits and unusual act

1. Motion Sensor infrared/microwave
2. Pressure-sensitive
3. Heat
4. Proximity capacitance detector
5. Vibration broken glass/collision/footsteps
6. Magnetic keys/coins/metal detector
7. Photometric change in light level (windowless room)

• Video CCTV
• Security Patrol guards
• Dogs
• Audio lithium/digital/concealable/phone transmitters

• paper/SW
• create logs automatically
• RFID

Log should ID:

1. Name
2. Date/time
3. Access portal/entry point
4. User ID entered
5. Location of Access
6. Unsuccessful Access attempts (unauth hours)

• lights
• bells/sirens
• local activation/response Emergency Doors
• local activation/remote response security company responds; home security
• remote activation/local response monitoring done remotely, local responders
• remote activation/remote response fire detection: fire alarm triggers fire dept

• Portability flash drives, other media; easy to move from controlled area;
• Damage and loss vulnerable to loss and damage

LABEL!

• 2man Rule: 2 people to monitor each other based on: nature of info, certain activities occurring, specific systems/media in use
• Inventory keep track of media to account for it
• Access Logging who accessed it
• Encryption protect sensitive info outside of area
• Media Logging who has it/where did it go

• Admin controls of personnel background checks, performance review, security clearance
• Mgt of secured areas areas and people
• Access based on Need to Know
• Escort/supervision for exceptions
• Unintensional Disruptions fire, HVAC

• Primary goal of (ISC)2
• establish and enforce policies/procedures

• Intrusion Response Policy direction how to respond to intrusion: "In the event of forced entry, notify police"
• Fire Policy
  
• Natural Emergency Policy

1. Evacuations
2. Restricted Building Re-entry prohibiting re-entry after disaster
3. General Employee Notification notify employees not to come in during disaster
4. Accounting for Employees head count
5. Key staff/org notification Press/Fire/Gas & Electric/Emergency Responders
6. Training/Drills/Exercises

• Access restrictions
• simple security options: locks, lighting, logs
• Advanced protection for secured areas: strengthened walls, etc
• AC & CCTV
• Restriction on devices

• separate lines to buildings for utils
• redundant lines
• backup power supply/generators
• separate routing for utils/communication
• adequate HVAC

• Service Entry Points utilities
• Service Protection backup power/utils/communication
• Electronic Protection computer/server rooms/telecom systems need HVAC: need to be cooled down because of heat generated by servers; need ventilation; ensure efficiency and reliability

• affect sercurity devices
• affect availability of data/resources: data loss/disruption

1. blackout power loss
2. brownout long term low-voltage power (dim lights)
3. sag momentarily low-voltage
4. spike short-term high-voltage
5. surge long-term high-voltage
6. in-rush surge/spike caused by device started uses great amount of current

• UPS
• Generators
• Surge/spike protectors
• Power line monitors

• HVAC Systems
• Pipes and drains
• Lighting

• Fire drill
• Maintenance of stairs/stairwells
• Fire Extinguishers
• Fire Suppresion Syst

• Smoke
• Heat
• Flame (optical sensors record radiation)

• Class levels A B C D K
• fuel, heat, O2

• Wet Pipe water stored and released
• Dry Pipe water pumped to pipes
• Preaction heat sensitive sprinklers
• Deluge high output heat sensitive sprinklers

• Gas
• No water