Physical Security of Server Rooms and Related Computing Hardware

Risks, Vulnerabilities and Threats

  • Physical damage to hardware
  • Loss/theft of data and/or hardware
  • Processing delays resulting in poor customer service or loss of income

 

Control Objectives and Operational Goals

  • Policies, standards, procedures, guidelines
  • Awareness of locations of hardware
  • Inventory of hardware
  • Physical controls in place including:
    • Restricted access; locks, secure location
    • Intrusion alarms
    • Environmental monitoring; heat, smoke, fire, water
    • Uninterruptible power supplies or generators
    • Periodic testing
  • Alternate processing site plans