O'Reilly logo

The CISA® Prep Guide: Mastering the Certified Information Systems Auditor Exam by John Kramer

Stay ahead with the world's most comprehensive technology and business learning platform.

With Safari, you learn the way you learn best. Get unlimited access to videos, live online training, learning paths, books, tutorials, and more.

Start Free Trial

No credit card required

4.9. Evaluating Physical Access Controls and Procedures

Physical access to systems and processes is an important aspect of evaluating the overall control of the information assets. A portion of every security-related review should look at the physical security of the devices along with the logical aspects of control. Without good physical controls, a device can simply be unplugged and carried off. A denial of service and complete loss of current data will result. Physical security is hard to enforce with technical people because they see their functions as more intellectual and scientific than, well, physical. No one likes confrontation and physical security requires confrontation and deterrence to effectively turn back the attempts of unauthorized access, either directly through brute force or using social engineering techniques. Aggressive behavior often begets more aggressive behavior, which can escalate into violence and physical harm, causing someone to get hurt. The best way to prevent this from happening is to ensure that the proper controls are in place and policies and procedures are thoroughly documented, communicated, and followed by everyone in the IS organization.

Your evaluation can add value by assisting the management in seeing these control requirements as a way of minimizing risk to their employees as well as their information assets and as good business practice at the same time. Testing to ensure that the procedures are followed will be important, because the ...

With Safari, you learn the way you learn best. Get unlimited access to videos, live online training, learning paths, books, interactive tutorials, and more.

Start Free Trial

No credit card required