6: Information Asset Protection in Software

Printing Code 39 Extended in Software 6: Information Asset Protection

Class B: Suitable for flammable liquids and gases Class C: Suitable for energized electrical equipment Class D: Suitable for combustible metals Class K: Suitable for cooking oils and fats The five types listed here are US standards Different classifications are used in other countries Larger fire extinguishers are used in some facilities that have 50 pounds or more fire retardant These larger units are mounted on large-wheeled carts that can be pulled to the site of a fire

Facilities containing computing and network equipment need to be kept clean, with dirt, dust, and debris kept to a minimum While computer rooms do not need to be kept clean to the same extent as clean rooms (facilities that manufacture disk drives and computer chips), they do need to be regularly cleaned to prevent the buildup of dust, dirt, and other particles that will clog filters and get inside computers and network devices, shortening their life span

The Telecommunications Industry Association (TIA) released the TIA-942 Telecommunications Infrastructure Standards for Data Centers standard in 2005 The standard describes various aspects of data center design, including reliability The standard describes four levels of reliability: Tier I - Basic Reliability Power and cooling distribution are in a single path There may or may not be a raised floor, UPS, or generator All maintenance requires downtime Tier II - Redundant Components Power is in a single path; there may be redundant components for cooling Includes raised floor, UPS, and generator Most maintenance requires downtime Tier III - Concurrently Maintainable Includes multiple power and cooling paths, but with only one path active Includes sufficient capacity to carry power and cooling load on one path while performing maintenance on the other path Includes raised floor, UPS, and generator Tier IV - Fault Tolerant Includes multiple active power and cooling distribution paths Includes redundant components, including UPS and generator Includes raised floor

Physical security controls are primarily concerned with the protection of valuable or sensitive facilities (including those with computers and network devices) from unauthorized personnel Controls are used to detect or prevent the entry of unwanted persons at these facilities This section describes typical threats and vulnerabilities related to physical security and the controls and countermeasures that can be employed to protect a facility

The threats and vulnerabilities in the realm of physical security are all associated with unwanted persons at business premises A site without proper security controls may be subject to one or more threats, including these: Theft Persons who are able to enter a building may be able to steal equipment, records, or other valuable items Sabotage Persons who may enter a building or work site may be able to damage or destroy valuable equipment or records Espionage Persons may wish to conduct espionage in order to acquire information about the organization Covert listening devices These are listening devices that can be placed in a building to overhear conversations and transmit them to a receiver located in a remote location Covert listening devices are commonly known as bugs Sometimes intruders plant bugs; bugs can also be hidden in articles that are delivered to a building (for example, in flower bouquets or gift baskets) Tailgating This is a specific technique that intruders may use when attempting to enter a building; they may follow an employee into a building without showing their own security credentials (for example, a keycard) This practice is also known as piggybacking Propped doors Sometimes a front, rear, or side door that is equipped with security controls will be propped open for various reasons, including hot weather (to permit a cooling breeze to enter and cool the building), frequent traffic moving in or out, or persons going out for a quick smoke who don t want the hassle of having to return to the building through another door Poor visibility A facility may have exterior features that permit an unauthorized person to lurk about without being noticed The person may be able to gain entry if he can discover a weakness before he is noticed himself