Associate Level Material Appendix E Physical Security Policy Student Name: University of Phoenix IT/244 Intro to IT Security Instructor’s Name: Date: Physical Security Policy Due in Week Five: Outline the Physical Security Policy. Merkow and Breithaupt (2006) state, “an often overlooked connection between physical systems (computer hardware) and logical systems (the software that runs on it) is that, in order to protect logical systems, the hardware running them must be physically secure” (p.165). Describe the policies for securing the facilities and the policies of securing the information systems. Outline the controls needed for each category as relates to your selected scenario. These controls may include the following: • Physical controls (such as perimeter security controls, badges, keys and combination locks, cameras, barricades, fencing, security dogs, lighting, and separating the workplace into functional areas) • Technical controls (such as smart cards, audit trails or access logs, intrusion detection, alarm systems, and biometrics) • Environmental or life-safety controls (such as power, fire detection and suppression, heating, ventilation, and air conditioning) 1 Security of the building facilities 1 Physical entry controls For the Sunica Music and Movies Company physical entry controls will vary depending on location.
After passing through an outer door, employees must then pass through a second door. Validation by a second card will be necessary to gain entry through the second door. Four video cameras will be installed at each location. The first camera will be positioned to view the area between the first and second front doors, the second camera will show the entrance to the server closet, the third camera will view the company parking area for the safety of employees, and the fourth camera will monitor the delivery entrance and loading area. Security monitoring will be subcontracted with a local security outfit.
Physical Security Client's Assessment Janet Roberts AJS 585 June 23, 2014 Instructor: Matthew Brandt Physical Security Client's Assessment Physical security describes measures that prevent or deter attackers from accessing a facility, resource, or information stored on physical media. (Physical Security Programs, System and Technology UOP ). In today’s world of advancing technology it is important for people and businesses to protect themselves against crime. Many organizations and home owners have taken security measure to protect their home, offices, and property. Many people have taken measures and have alarm systems in place at their homes and businesses for protection.
You should record: * Date and time of arrival or visit * What happened * If tests were performed 2.2. All information that is stored electronically should be password encrypted and only accessible to staff with the password. All other sensitive information should be kept secure by it up in a secure room such as a staff office or even in a separate building. 2.3. Manual security storage systems are
A security document will state the schema for RBAC. RBAC section of the security document will have a section for HR and the need to protect sensitive information. Included in the section for sensitive information is the restrictions for the IT staff, use of ACL’s, VLANs, and list protected resources. There will be a section in the security document stating the restrictions to information systems (IS). Restrictions to IS include physical as well as network of LAN access.
The Manual Handling Regulations of 1992, which sets out methods and requirements to be met when manually handling objects, as well as people. The Reporting of Injuries, Diseases and Dangerous Occurrences Regulations 1985 (known as RIDDOR) outlines what is required to be recorded and reported. Food safety act 1990 Personal Protective Equipment at Work Regulations (PPE) 1992 Lifting Operations and Lifting Equipment Regulations (LOLER) 1998 1.2 Explain the mean points of health and safety policies and procedures agreed with the employer The main points of health and safety policies and procedures largely centre on standards that must be upheld in order to create a safe place of work, and also to ensure that somewhere meets all legislation requirements when it comes to things like COSHH, where all substances must be locked away while not in use, and not left around when being used if the worker leaves the room, even for a moment, that is if the level of work is to keep up with the standard required to maintain itself within the COSHH legislation. Or even
* data is kept secure * datat is processed within the persons rights. * data must not be transferred country without appropriate data preotection measures put int place. 2. Be able to implement good practice in handling information 2.1 Describe features of manual and electronic information storage systems that help ensure security There are many manual and electronic options for storing sensitive information these are: manual: * locked cabinet * locked safe * locked cupboards * locked briefcase * lock your office electronic: * appropriate firewall, spyware, malware and antivirus software. * password encrypt your files, emails and computer.
2.1- manual- at work all written documentation is stored alphabetically in locked offices. Our care plans have an ‘access to resident file’ form in the front which residents or their families fill in letting everybody know who is allowed to access the information. Electronic- documents stored electronically e.g. on a computer are protected by fire walls and anti-virus software as well as passwords which are changed on a regular basis and only authorised personnel have access to. 2.3- it is important that the records we have are kept up to date, complete, accurate, and legible to ensure that people are receiving the care and support that they need as their needs may change.
The policies and procedures are kept in a folder in the office so every member of staff can read them if they are unsure in any way. The policies and procedures are also in place to protect the company in case anything goes wrong. Examples of policies and procedures in the workplace are health and safety, risk assessment, person centred planning and the complaints procedure etc. Personal information is confidential and should be locked away in a cupboard, behind a locked door as required by the data protection act. If personal information is stored on a computer then it is important that the computer is secured with a password and the computer must also be kept behind a locked door.
• Employees Policies and procedures- To make sure that all records that are kept in the office are put away in a locked secure cabinet • Health and social care act 2008- requires us to publish a code that sets out the practice we will follow in obtaining, handling, using and disclosing confidential personal information according to our regulated activity. Aii Explain how legal requirements and codes of practice affect the day to day work of a social care worker in relation to handling information. Within the homes there are many legal requirements and codes of practices that are put into place to ensure that staff know what is expected of them when handling information. By having these legal requirements, staff can show good practice by following the correct guidelines e.g. talking about the service user away from other service users.