Implementing Physical Security As An Access Control Plan

Physical security is implemented via a locked door policy that is set with swipe card access. The company has security cameras set up in the front entry hallway to record entry and exit of all personnel. The server room floor is raised with cable management fed through easy access panels. The server room is locked at all times, with access is via swipe card only. There are foam sprinklers throughout the roof system to protect against fire. Racks are locked up to ensure no items can be manipulated without appropriate personnel present. Studio and production labs also have swipe card access to protect equipment.

Physical security – are generally intended to deter potential intruders 9 e.g. warning signs and perimeter markings); to detect intrusions and monitor / record intruders (e.g. intruder alarms and CCTV systems); to trigger appropriate incident responses (e.g. by security guards and police).

Biometrics are important to not only information systems, but to information security as a subject. Today, most information is kept secure via ID cards or secret information, such as a PIN, password, pattern, etc., the downside to this type of security is the lack of a failsafe (Ashok, Shivashankar and Mudiraj)! What would happen if an ID card was lost? Or a PIN, password or pattern was leaked to individuals who were not on a “need to know” basis”? This is where the importance of biometrics comes into play.

Identification processes are significantly more complex and error prone than verification processes. Biometrics technologies are indicators of authentication assurance with results based on a predetermined threshold with measurable False Accept Rates and False Reject Rates.

The framework of security policy is defined to construct a structure by the help of which policy gaps can be identified in an easy manner. A system specific policy would assist to ensure that all employees and management comply with the policies. This is also used to maintain the confidentiality for user authentication would assist in the confidentiality aspect of security, maintain integrity (There are several limiting rules or constraints which are distinct in the relational data model and whose work is to maintain the data’s accuracy and maintain its integrity.), availability and authenticity of the system. Access controls are a collection of mechanisms that work together to create security architecture to protect the assets of an information system. One of the goals of access control is personal accountability, which is the mechanism that proves someone performed a computer activity at a specific point in time. So, the framework acts as the guideline

As an information security officer for a small pharmacy there are a few things that need to be addressed. As with all companies it is top priority to make sure that the data that is input into the machines stays safe and to make sure that the people using the computers know it is their responsibility as well. As a security officer my supervisor has asked me to identify any inherent risks associated with the pharmacy and establish any physical and logical access control methods that will mitigate the risks identified.

Physical security will involve the company securing its assets by devices such as alarm system for off hour use, and identification cards for employees. A process should be in place to make sure that guests are properly identified before gaining assess to the facility. Users cannot take computer home unless they are protected by encryption software. Downloading proprietary information onto floppies, CD, thumb/flash/memory drives and other portable media should be disallowed unless such transactions are pre-approved and proper security measures are taken.

That part of security concerned with physical measures designed to safeguard personnel, to prevent unauthorized access to equipment, installations, material, and documents and to safeguard them against espionage, sabotage, damage, and theft.

Physical security is defined the part of security which measure the safeguard personnel by preventing the access of installations,

The security and authorization family controls are focused on the creation and maintenance of a security plan. Through this it would identify the individuals responsible for information systems and the development of plans and how to implement them by creating goals to help them in meeting their overall goal for their security program.

systems and various types of biometric and other devices. These ensure life and comfort are protected

Companies can prevent falling victim to unauthorized physical access by developing and implementing simple policies, standards, procedures, and guidelines for employees as well as guests to follow. Secure all areas containing sensitive systems and/or data. Require staff to follow entrance procedures when entering a secured area. Also ensure that physical data such as important documents are secured. Require

In addition to the threats and vulnerabilities inherited with wired local area networks (LAN) there are many more risks associated with the use of wireless and mobile technologies. The use of laptops, smartphones, and tablets create vulnerabilities that can fall outside our network securities measure. Attackers will be able to bypass the firewalls and gain direct access to the doctor’s data. Once an intruder has access to the network the intruder will be able to launch denial of service

One of the most important ways that biometric technology is impacting security lies within the confines of computer information systems. The government, the military, and large corporations need to have complete assurance that the data and information stored on their networks and databases are only available to users who have been authorized to view such material.

Biometrics is used in many places and there is a bright future for them. Coca Cola has recently replaced time card system with hand scanning machines. Finger print scanners are being used in many states of the US. They have been used to trace social welfare fraud. An iris pattern identification system is being used in Cook County, Illinois to ensure that right people are released from jail. ATM machines have been installed with finger scanners to prevent theft and fraud in Indiana (Jain, 2005).