Writing Information Security Policies

Summary

Physical security policies go beyond the typical concepts of guns, guards, and gates. These policies also must consider facilities planning, management, and disaster recovery procedures. In this chapter, we discussed how to look at policies to physically secure the organization’s infrastructure.

1. Computer location and facility construction:

   • Facility construction policies should consider the location of a new computer or communications center and where the facility is located within a building. These policies may consider how facilities can access redundant supplies or public utilities resources.

   • Locks and barriers policies should not only consider what it takes to maintain physical security from human intervention, but nonhuman causes ...