ANSWERSLATEST - assets: people, equipment, and data BCP/DRP - A...

1

ANSWERS|LATEST

PASS Physical Security - ANSWER largely concerned with the protection of three main

assets: people, equipment, and data

BCP/DRP - ANSWER business continuity planning and disaster recover planning -BCP: plans we put in place to ensure that critical business functions can continue operations through the state of emergency.-DRP: the plans we put in place in preparation for a potential disaster, and what we will do during and after it strikes to replace infrastructure

Major categories of physical threats - ANSWER extreme temperature, gases, living organisms, projectiles, movement, energy anomalies, people, toxins, smoke, and fire

Physical security controls - ANSWER The devices, systems, people, and other methods we put in place to ensure our security in a physical sense

Main types of physical controls - ANSWER deterrent, detective, and preventive

Deterrent controls - ANSWER designed to discourage people who might seek to violate your other security controls, and they generally indicate the presence of other security measures.

Detective controls - ANSWER serve to detect and report undesirable events that are taking place.ex: burglar alarms have a detection control that will sound if there is an intrusion 1 / 3

2

Preventive controls - ANSWER are used to physically prevent unauthorized entities from breaching our physical security.

ex: simple mechanical lock

physical concerns for people - ANSWER people are fragile in comparison to equipment. They can be susceptible to nearly the entire scope of threats

Safety - ANSWER the first and foremost concern on our list when we plan for physical security

Evacuation - ANSWER one of the best methods we can use to keep our people safe

-Principles to consider when planning: where, how, and who

Where (evacuation) - ANSWER whether we are evacuating a commercial building or residence. We need to get everyone to a rally point to ensure that they are a safe distance and that we can account for everyone

How (evacuation) - ANSWER -when planning routs, we should consider where the nearest exit from a given area can be reached, as well as the alternate routes if some routes are impassable in an emergency.-avoid the use of areas that are dangerous or unusable in emergencies, such as elevators or blocked areas

Who (evacuation) - ANSWER -most vital portion is to ensure that we get everyone out of the building, and that we can account for everyone at the meeting place.-process requires at least two people to be responsible for any given group of people: one person to ensure that he/she is responsible for who has actually left the building, and the other at the meeting place to ensure everyone has arrived safely

• / 3

3

Practice - ANSWER particularly in large facilities, a full evac can be a complicated prospect. Do this to prevent injury or loss of life.

Physical concerns for data - ANSWER Depending on the type of physical media on which our data is stored, any number of adverse physical conditions may be problematic or harmful to their integrity. Such media are often sensitive to temperature, humidity, magnetic fields, electricity, impact, and more, with each type of media having its particular strong and weak points.

Availability (protecting data) - ANSWER ensure that the data is available to us when we need to access it. Often hinges on both our equipment and our facilities remaining in functioning condition and the media on which our data is stored being in working condition

Residual data - ANSWER when we look at the idea of keeping data safe, we not only need to have the data available when we need access to it, but we also must be able to render the data inaccessible when it is no longer required

Backups - ANSWER maintain backups. Not only do we need to back up the data itself, but we also need to maintain backups of the equipment and infrastructure that are used to provide access to the data

Raid - ANSWER we can utilize redundant arrays of inexpensive disks (RAID) in a variety of configurations to ensure that we do not lose data from hardware failures in individual disks, we can replicate data from one machine to another over a network, or we can make copies of data onto backup media, such as DVDs or magnetic tapes

Physical concerns for equipment - ANSWER The physical threats that might harm our equipment, although fewer than those we might find harmful to people, are still numerous.-Extreme temperatures can be very harmful to equipment.-Liquids can be very harmful to equipment, even when in quantities as small as those that can be found in humid air.-Living organisms can also be harmful to equipment, although in the environments with which we will typically be concerned, these will often be of the smaller persuasion. Insects

• / 3