CISSP 的Physical v5.0.pptVIP

* Lock Security Measures Appropriate usage of locks and keys is dependent upon effective controls. A lock and key control system is critical. Proper procedure for key controls should be implemented and documented. Accurate records must be maintained to include: - who has access to keys - who the keys are issued to - key inventory (sign out, destruction) Procedures to deal with lost keys must be established. Changing combinations must occur at specific times or under specific circumstances. I.e - When to change a safe lock: - every twelve months - when possibly compromised - when a facility member who knows the combination leaves * Guard Stations A guard station is a specially constructed enclosure that is usually manned 24 hours per day, seven days a week. They are equipped to monitor the security of the facility through TV monitors, alarm systems, intercoms, automatic photographing of persons entering the facility, radio police scanners tuned to emergency channels, and radio devices such as walkie-talkies for emergency communications. If in a high threat environment, they are constructed with bulletproof walls, doors, or windows. Ensure clear sight lines and access to main doors, etc. ?Guards, or some type of security force, can provide a deterrence and a flexible security and safety response in the event of an unauthorized intrusion. Questions to consider when deciding on a security force are: ·??????? Is hiring or contracting more cost-effective? ·??????? Are the guards certified or licensed? ·??????? Should the guards be armed or unarmed? ·??????? Are there union considerations? * * We are looking at physical security from a ‘layered approach’. Now, on to the next ‘layer’. * This is a subtopic slide for the controls inside the Building. The next few slides will cover these in more detail. ? ? * A compartmentalized area defines an actual location where sensitive equipment and information is operated and stored. It includes establishing res