xx Contents
Information Security Education and Training 270
Reporting Security Incidents 270
Security Incidents Reporting Guideline 270
Reporting Security Weaknesses 270
Physical and Environmental Security 271
Physical Security 271
Physical Entry Control 271
Securing Offices, Rooms, and Facilities 271
Equipment Security 272
Protect the System from Undesirable Booting 272
Set Up Storage Protection for Backup Tapes 273
Equipment Sitting and Protection 273
Power Supplies 273
Cabling Security 273
Equipment Maintenance 273
General Controls 273
Clear Desk and Clear Screen Policy 273
Removal of Property 274
Communication and Operation Management 274
Operational Procedure and Responsibilities 274
Documented Operating Procedures 274
Information Secu