Operations/facility security
Facility security concerns the management of facility controls. Some of the important controls that need attention are auditing and emergency procedures.
Auditing
Auditing is a process to check and validate the effectiveness of controls. The primary tool that assists in the audit is an audit trial. In physical and operational security domains, auditing is primarily done from the scope of physical access controls and operational procedures. The focus of the audit is to ascertain that the threats and vulnerabilities to physical access are identified, suitable mitigation to the risks is being implemented, and the effectiveness of physical access controls is ascertained.
While doing audits with the scope of physical security of information systems, the following points need to be considered:
- The physical location of the information systems is a primary factor. Environmental factors, such as proximity to toxic chemical installations and locations that are in the seismic...