There are 10 physical the most essential security measures every organization should take, if you haven’t already done so of course.
#1: Lock up the server room
The server room is the heart of your physical network, and someone with physical access to the servers, switches, routers, cables and other devices in that room can do enormous damage.
#2: Set up surveillance
No doubt you need a way to know who goes in and out and when.
A better solution than the log book is an authentication system incorporated into the locking devices, so that a smart card, token, or biometric scan is required to unlock the doors, and a record is made of the identity of each person who enters.
A video surveillance camera, placed in a location that makes it difficult to tamper with or disable (or even to find) but gives a good view of persons entering and leaving should supplement the log book or electronic access system. Surveillance cams can monitor continuously, or they can use motion detection technology to record only when someone is moving about. They can even be set up to send e-mail or cell phone notification if motion is detected when it shouldn’t be (such as after hours).
#3: Make sure the most vulnerable devices are in that locked room
Because it’s not just the servers you have to worry about. A hacker can plug a laptop into a hub and use sniffer software to capture data traveling across the network.
#4: Use rack mount servers
Rack mount servers not only take up less server room real estate; they are also easier to secure.
#5: Don’t forget the workstations
Hackers can use any unsecured computer that’s connected to the network to access or delete information that’s important to your business.
#6: Keep intruders from opening the case
Both servers and workstations should be protected from thieves who can open the case and grab the hard drive.
#7: Protect the portables
Handhelds can be locked in a drawer or safe or just slipped into a pocket and carried on your person when you leave the area. Motion sensing alarms such as the one at SecurityKit.com are also available to alert you if your portable is moved.
#8: Pack up the backups
Backing up important data is an essential element in disaster recovery, but don’t forget that the information on those backup tapes, disks, or discs can be stolen and used by someone outside the company..
Don’t overlook the fact that some workers may back up their work on floppy disks, USB keys, or external hard disks. If this practice is allowed or encouraged, be sure to have policies requiring that the backups be locked up at all times.
#9: Disable the drives
If you don’t want employees copying company information to removable media, you can disable or remove floppy drives, USB ports, and other means of connecting external drives.
#10: Protect your printers
You might not think about printers posing a security risk, but many of today’s printers store document contents in their own on-board memories. Also think about the physical security of documents that workers print out, especially extra copies or copies that don’t print perfectly and may be just abandoned at the printer or thrown intact into the trash can where they can be retrieved.
You have to remember that network security starts at the physical level. All the firewalls in the world won’t stop an intruder who is able to gain physical access to your network and computers, so lock up as well as lock down.
