This is the first in a series about the concept of Zero Trust, which means in the IT sense that you trust nothing and always verify everything surrounding and connected to your network. Today’s discussion will be on the physical security surrounding your network.
Physical Security
Physical security can include the locks on the doors, where things are placed, and how they are protected from the unpredictability of the environment. Here are some questions that you should be asking yourself:
- Do you know where your network equipment is located?
- Is the server / network in a separate area from where work is done?
- Is this separate area behind a locked door?
- Is the equipment in a locked rack or cabinet?
- Is there a separate air conditioning zone for this area (servers like it cold)?
- Is there a separate alarm zone for this equipment?
- Who has the codes?
- Is there a security camera watching this area (we don’t install these)?
- How long is the recording for?
- Who has access to the recordings?
- Are computers located in areas where customers can physically touch them?
- Are unused USB ports on the computer turned off or locked?
- Are all systems protected by battery backup devices?
- Are all systems off the floor in case of a flood?
Take time to think about these questions and decide where changes can be made to better protect your IT investments, or contact us to do the thinking for you.