4 - Major Elements of a Physical IT Security Plan

Abstract

This chapter explains the major elements of a physical IT security plan, including the overview and mission statement, assignment of organizational responsibilities, use of duty officers, and management of contact lists. The chapter also covers security procedures for data centers, wiring and cabling, remote computers, desktops, department-based servers, and telecom and data communications equipment, manufacturing control equipment, and surveillance and alarm systems. Physical security procedures for surveillance and alarm systems are similar in many ways to those for manufacturing control equipment and telecom and datacom equipment. The material in this chapter shows the major elements of a physical IT security plan and recommends a structure for the documentation of the plan and accompanying procedures. Organizations can take several steps to improve the physical security of IT assets.