Physical controls aim to protect information system processing facilities through physical mediums, such as locks, fences, closed-circuit TV (CCTV), and devices that are installed to physically restrict access to a facility or hardware.
Similarly, environmental controls refer to measures taken to protect systems, buildings, and related supporting infrastructure against threats associated with their physical environment. Physical and environmental safeguards are often overlooked but are very important in protecting information. Let's have a look at each of them in more detail.
Environmental controls
An IS auditor should consider the following aspect of environmental controls.
The following are four types of power failure:
- Blackout: Blackout indicates a complete loss of power.
- Brownout: Severely reduced voltage, which may place strain on electronic equipment or may even lead to permanent damage.
- Sags, spikes, and surges:
- Sag is a rapid decrease...
