19
Physical & Environmental Security Presented by Mohammad Ashfaqur Rahman Compliance Professional www.linkedin.com/in/ashfaqsaphal [email protected]

007.itsecurity bcp v1

Embed Size (px)

Citation preview

Physical & Environmental Security

Presented by

Mohammad Ashfaqur RahmanCompliance Professional

www.linkedin.com/in/ashfaqsaphal

[email protected]

Objective

● Crime Prevention● Physical Access Controll● Video Survillance System● Fire Survilance System● Air conditioning● Electrial Solution● Mechanical Practices

Physical Security

● discuss about the threats, vulnerabilities, and countermeasures that can be utilized to

– physical protect an enterprise’s resources – and sensitive information.

● covers designe to deny access to unauthorized personnel (including attackers) from

– physically accessing a building, facility, resources, or stored information;

● and guidance on how to design structures to resist potentially hostile acts.

Threats to Physical Environment● Natural environmental threats

– Floods, earthquakes, storms and tornadoes, fires, extreme temperature conditions, and so forth

Threats to Physical Environment● Supply system threats

– Power distribution outages, – communications interruptions,– and interruption of other natural energy resources

such as water, steam, gas, and so on.

Threats to Physical Environment● Manmade threats Unauthorized access (both internal and

external)– explosions, damage by angry employees, employee

errors and accidents, vandalism, fraud, theft

Threats to Physical Environment● Politically motivated threats

– Strikes, riots, civil disobedience, terrorist attacks, bombings, and so forth

Physical Access Controll● Electronic Card● Biometric security● Access Level

Video Survilance● CCTV● DVR● IP Camera● Remote Access

Fire Survilance● Fire

– Cause : heating equipment, electrical panel, broken ware, electrical extention

● Fire Alarm System / Survilace System

– Detect fire element, like smoke, heat– Locate fire ignition point– Operate fire fighting equipment– Initiate fire evacuation process and save life

HVAC● Heating, Ventilating and Air Conditioning

– Upflow , downflow and inrow– Air volume cubic feet per – minute (CFM) per ton.– Humidity control (RH 45% - 60%).– Temperature control (72°F ± 2°F).– Air Filters.– Positive air pressure.– Protected intake vents.– Alarms: Leak detection, loss of power, – temperature, humidity, fire, smoke detector.

HVAC

Crime Prevention● Natural Access Control

– Terrain• Distance from fenced boundary to

building.• Distance to adjacent building or

structure.• Roadway and paths to building(s).

– Landscaping• Spiny shrubs and/or trees• Grass, sod or gravel traps• Water (i.e. drainage pond, lake or

stream)

Crime Prevention● Natural Surveillance

– personnel walkways– activity areas in ways that maximize visibility

● Make employees feel safe and intruders feel uncomfortable

Crime Prevention● Territorial Reinforcement

– Physical designs that emphasize or extend the company’s physical sphere of influence so that legitimate users feel a sense of ownership of that space

– Use walls, fences, flags, etc.– Create a sense of dedicated community

Crime Prevention● Territorial Reinforcement

– Physical designs that emphasize or extend the company’s physical sphere of influence so that legitimate users feel a sense of ownership of that space

– Use walls, fences, flags, etc.– Create a sense of dedicated community

Data Center tier● Tier 1 = Non-redundant capacity components (single uplink and

servers).● Tier 2 = Tier 1 + Redundant capacity components.● Tier 3 = Tier 1 + Tier 2 + Dual-powered equipments and multiple

uplinks.● Tier 4 = Tier 1 + Tier 2 + Tier 3 + all components are fully fault-

tolerant including uplinks, storage, chillers, HVAC systems, servers etc. Everything is dual-powered.

Ref : www.adc.com/Library/Literature/102264AE.pdf

Data Center tier

Where are we ?