6.5 - Physical protection Flashcards
Examples of physical protection
- Locks, keypads, biometrics used on workstations, server room access
- Placing computers above known flood levels
- Backup systems in other locations
- Security staff
- Shredding of paper based records
RFID//TOKENS
- BACKUP
Locks
prevent access to server rooms/sensitive data stores.
only authorised personnel (staff) with the right key will have access
How could locks be used in PHPS and what does this then ensure?
some parcels, especially high value or fragile items may need to be stored in locked sections within the warehouse to ensure they’re not misplaced or stolen.
Biometrics
- input of human characteristics such as fingerprint, iris, or voice scan.
this can be used
smartphones, tablets, PCS, laptops
How would biometrics be used in PHPS + what does it ensure?
Biometrics can be used for attendance management, ensuring the courier is present during their shifts, with no possibility of fraudulent timekeeping.
Shredding
cutting docs into small pieces so sensitive data/confidential data cannot be read/rearranged.
this could be sensitive data on paper / optical disc
How would shredding be used in PHPS and why?
The company may use packaging materials that contain sensitive information e.g. shipping labels, delivery notices etc.
It should be shredded before disposal to prevent the details from being accessed by unauthorized individuals.
Security staff
Staff may be employed to physically prevent unauthorised people from accessing certain areas of buildings where sensitive information is stored
e.g server rooms, check ID keycards, use surveillance such as CCTV to monitor those that are who are entering/exiting a secure area.
Backup systems in other locations - what is it and what does it then help with/prevent
should be done regularly and stored at secure location away from the main site.
backups could also be stored on cloud servers so that any damage to the organisations building will not affect the backup as well.
Why might PHPS do backup systems offsite?
Disaster recovery planning: backups must be practiced to the company’s disaster recovery plan.
In case of a major disaster such as natural disaster, backups allow the company to quickly restore key systems such as customer data and minimize downtime.
RFID and Tokens
using electromagnetic fields to attach tags to physical objects by embedding them in dumb objects such as clothing / packaging.
RFID - used with security tokens such as ID keycard to give acess levels to authorised people to certain areas.
they can be used by IT companies to track equipment and manage access.
