CIO Wisdom II: More Best Practices

Best Practices: Procedures and Policies

Physical security is not the same as Internet or cyber security, but is certainly just as important. Physical entry into a building or a data center is a tremendous advantage for an attacker or thief. Appropriate procedures and policies must closely control the physical access to your most valuable assets.

Creating the appropriate policy should include the following:

• Piggy-back rules for access through controlled doorways

• Access control to all areas containing valuable assets

• Human guards

• Card readers with enhanced security (smart card readers and biometrics)

• Proper wearing of identification badges, possible color-coding of badges to perform visual checking

• Auditing of access to all areas

• Monthly testing of controls ...