Title: Chapter 9 Overview
Course: IN 2001 Principle of Information Assurance > Section: Module 9: Chapter Nine

Physical Security

Introduction
Physical security addresses the design, implementation, and maintenance of countermeasures that protect the physical resources of an organization.  Most of the technology-based controls discussed to this point can be circumvented if an attacker gains physical access to the devices being controlled. Some computer systems are constructed in such a way that it is easy to steal the hard drive and the information it contains.  As a result, physical security should receive as much attention as logical security in the security development life cycle.
Seven Major Sources of Physical Loss (Donn B. Parker)
1. Extreme temperature: heat, cold
2. Gases: war gases, commercial vapors, humid or dry air, suspended particles
3. Liquids: water, chemicals
4. Living organisms: viruses, bacteria, people, animals, insects
5. Projectiles: tangible objects in motion, powered objects
6. Movement: collapse, shearing, shaking, vibration, liquefaction, flow waves, separation, slide
7. Energy anomalies: electrical surge or failure, magnetism, static electricity, aging circuitry; radiation: sound, light, radio, microwave, electromagnetic, atomic

Physical security is designed and implemented in several layers. Each community of interest in the organization is responsible for components within these layers.

General management: Responsible for the security of the facility in which the organization is housed and the policies and standards for secure operation

IT management and professionals: Responsible for environmental and access security in technology equipment locations and for the policies and standards of secure equipment operation

Information security management and professionals: Perform risk assessments and implementation reviews for the physical security controls implemented by the other two groups.

Physical Access Controls
Fire Security and Safety
Failure of Supporting Utilities and Structural Collapse
Interception of Data
Mobile and Portable Systems
Special Considerations for Physical Security Threats