Information System Security: Physical & Logical Safety Measures
Information System Security
Passive and Active Safety
Passive safety: Corrective measures implemented to minimize the impact of security incidents and allow system recovery.
Active safety: Mechanisms and procedures for preventing and detecting security risks in information systems.
Physical and Logical Security
Physical security: Protection of physical elements, such as hardware and the locations where activities take place.
Logical security: Protection of software and operating systems, including data and information.
Security in the Physical Environment
The physical environment encompasses the rooms housing computer equipment, network systems, and peripherals. A technical editor should be familiar with safety standards to ensure compliance and seek necessary improvements to mitigate risks to hardware, software, and information.
Intruder Alarms
- Central module: An electronic console controlling other components. It allows for delayed alarm activation, enabling authorized personnel to enter and deactivate the system. It may be controlled by voice or password, or via a remote.
- Detectors: Sensors that detect changes in the physical space. Modern cameras can record and transmit images to an internal or external alarm center.
- Cabling system: While most systems are wireless, some still use cables.
- Autonomous/emergency batteries: Provide continuous power or backup during outages.
- Magnetic contacts: Placed on doors and windows, triggering an alarm if separated.
- Warning phone: Sends a signal to predetermined phone numbers.
- Emergency pushbuttons: Activate the alarm if an intruder is detected in a restricted area.
- Alarm: An acoustic device emitting a siren, often accompanied by a light signal.
Electrical Installation
External power supply belongs to the electricity company, while the internal supply is owned by the organization. Internal wiring should have sufficient capacity, use approved components, and meet safety standards.
Protective measures for personnel include earthing, magneto-thermal devices, and sufficient power sectors. Generators and UPS systems can provide backup power during outages. Emergency lights are also essential.
Temperature
Optimal operating temperature for computers is between 15 and 25°C. Air conditioning systems should maintain a comfortable environment for personnel without compromising equipment function.
Air and Humidity
Ideal humidity for computer systems is 40-50%. Humidifiers or dehumidifiers may be necessary. Dust particles can be mitigated with natural ventilation and air purification systems. Gas detectors can monitor air quality.
Water
Water damage can be disastrous. Bathrooms and water sources should be located away from hardware. Hardware should be elevated and kept away from windows.
Fire Systems
Fire safety measures include fire barriers, escape routes, and extinguishing systems.
- Firewalls: Prevent fire spread between building areas.
- Fire doors and dampers: Limit the spread of fire, smoke, and toxic gases.