Certified Information Systems Security Professional (CISSP) Exam Guide

9

Facilities and Physical Security

All IT infrastructure exists in the physical domain. Where components such as servers are defined by code, that code still exists on a machine. Cloud-based services, such as infrastructure or software as a service, still have code on hardware. Likewise, the security of your data also comes with physical concerns. Malicious actors can attempt to break into data centers to insert listening devices or damage and destroy equipment. Critical cabling and electronics can be destroyed by accidental fires, and data centers are susceptible to the effects of natural disasters such as floods and earthquakes.

In this chapter, you will learn how to secure information systems by securing the premises. This is known as physical ...