Information Security Fundamentals, 2nd Edition

88  ◾  Information Security Fundamentals

Risk assessment identified five key areas of concern:

1. Restricted physical access areas should be considered throughout GLBA

Action Plan: A physical security risk assessment will be conducted to deter-

mine if there is a need to create restricted access areas and/or increase physical

access controls.

2. Power failure could cause corruption of information or prevent access to the

system

Action Plan: Network UPS may not be adequate for a power outage out of

regular business hours. Install a backup domain controller at Ualena Street

and connect it to the Ualena Street UPS.

3. Information classification scheme is incomplete

Action Plan: GLBA has created a draft information classification policy

that add ...