Introduction. There Are Many Factors To Consider In The

IT Managers now have many responsibilities (data centers, staff management, telecommunications, servers, applications, workstations, websites, mobile access and devices, user support, regulatory compliance, vendor management, disaster recovery, etc.) and work with all the departments (accounting, human resources, marketing, sales, distribution, facilities, legal, etc.) within a company or organization.

(TCO 6) Many believe that the most important physical security control is _____. (Points : 5)

Sadly, there is no way to alleviate the numerous amounts of threats that haunt networks and computers worldwide. The foundation and framework for choosing and implementing countermeasures against them are very important. A written policy is vital in helping to insure that everyone within the organization understands and behaves in an appropriate manner with regards to the fact that sensitive data and the security of software should be kept safe.

Physical security is implemented via a locked door policy that is set with swipe card access. The company has security cameras set up in the front entry hallway to record entry and exit of all personnel. The server room floor is raised with cable management fed through easy access panels. The server room is locked at all times, with access is via swipe card only. There are foam sprinklers throughout the roof system to protect against fire. Racks are locked up to ensure no items can be manipulated without appropriate personnel present. Studio and production labs also have swipe card access to protect equipment.

internal and external users to whom access to the organization’s network, data or other sensitive

* Facility Security - There was not much mention of the physical security aspects that are employed at each site. Recommend doing a comprehensive review of the physical security of each complex and recommend security features to each distinct location. Highly recommend the corporate office shift to a common access card (CAC) entry to the facility.

* Align IT security policies throughout the 7 domains of a typical IT infrastructure as part of a layered security strategy

Physical security – are generally intended to deter potential intruders 9 e.g. warning signs and perimeter markings); to detect intrusions and monitor / record intruders (e.g. intruder alarms and CCTV systems); to trigger appropriate incident responses (e.g. by security guards and police).

This policy establishes the guidelines that the organization follows. This would include an acceptable use policy, an authentication policy, and an incident response policy (“The IT Security Policy Guide”, n.d., pg. 6). This policy will reflect the entire organizations security posture, not just the IT department ideas. A strong policy will help employees understand what is expected of them, and explain to customers how their information is protected.

Employees must be trained to security policy and procedures with periodic assessments on the effectiveness of these policies and procedures. Physical and authorized access is required to be limited. Policies should include proper use of and access to workstations and electronic media as well as the transfer, removal, disposal,

Management defines information security policies to describe how the organization wants to protect its information assets. After policies are outlined, standards are defined to set the mandatory rules that will be used to implement the policies. Some policies can have multiple guidelines, which are recommendations as to how the policies can be implemented. Finally, information security management, administrators, and engineers create procedures from the standards and guidelines that follow the policies.

The organisation maintains policies for the effective and secure management of its information assets and resources.

Companies can prevent falling victim to unauthorized physical access by developing and implementing simple policies, standards, procedures, and guidelines for employees as well as guests to follow. Secure all areas containing sensitive systems and/or data. Require staff to follow entrance procedures when entering a secured area. Also ensure that physical data such as important documents are secured. Require

The CIO role in the company needs to be clearly identified along with accountabilities and objectives for him and his organization, including preventing security breaches.

The CIO is generally a senior executive responsible for information technology and computer systems for the organization. They are responsible for the organization’s security posture. Some of their responsibilities might include: overseeing the IT department; identifying, developing, and implementing new IT Concepts; network access and IT infrastructure. Often they are responsible for recruitment and hiring the IT staff.