Writing Information Security Policies

Facilities Access Controls

Putting up walls and barriers can help keep people out, but who is allowed in? Policies maintaining access controls as well as records of who has accessed information facilities can be used to complement construction policies. If you do not understand how these policy areas complement each other, try writing facility access policies before writing facility construction policies.

Building Access Controls

Having worked for companies of all sizes, including government contractors, I have seen a number of different measures used to restrict access to buildings, computer rooms, and equipment closets. Most use a system based on an identification badge with the user’s picture and some coding as to their clearance or status ...