Alternatively, unauthorised access to network devices may allow an adversary to reset them to factory default settings, thereby removing any controls, or connect directly to them in order to bypass network access controls. Unprotected network devices in public areas could lead to accidental or deliberate physical damage resulting in an interruption of services. Physical access to network devices in public areas Keys or equivalent access mechanisms to server rooms, communications rooms, security containers and secure rooms are appropriately controlled. Server rooms, communications rooms, security containers and secure rooms are not left in unsecured states.Ĭontrol: ISM-1074 Revision: 3 Updated: Dec-21 Applicability: All Essential Eight: N/A Servers, network devices and cryptographic equipment are secured in security containers or secure rooms suitable for their sensitivity or classification taking into account the combination of security zones they reside in.Ĭontrol: ISM-0813 Revision: 4 Updated: Dec-21 Applicability: All Essential Eight: N/A Servers, network devices and cryptographic equipment are secured in server rooms or communications rooms that meet the requirements for a security zone suitable for their sensitivity or classification.Ĭontrol: ISM-1530 Revision: 1 Updated: Dec-21 Applicability: O, P, S, TS Essential Eight: N/A
This is then further supplemented by the use of security containers or secure rooms for the protection of servers, network devices and cryptographic equipment.Ĭontrol: ISM-1053 Revision: 3 Updated: Dec-21 Applicability: O, P, S, TS Essential Eight: N/A The second layer of physical security is the use of an additional security zone for a server room or communications room. Physical access to servers, network devices and cryptographic equipment Systems are secured in facilities that meet the requirements for a security zone suitable for their sensitivity or classification. As such, an organisation implementing deployable platforms should contact their physical security certification authority to seek additional guidance.Ĭontrol: ISM-0810 Revision: 5 Updated: Dec-21 Applicability: O, P, S, TS Essential Eight: N/A
This may include perimeter controls, building standards and manning levels. Notably, physical security certification authorities dealing with deployable platforms may have specific requirements that supersede the controls in these guidelines. The first layer of physical security being the use of a security zone for facilities containing systems.ĭeployable platforms should also meet physical security requirements. The application of the defence-in-depth principle to the protection of systems is enhanced through the use of successive layers of physical security. Facilities and systems Physical access to systems
0 kommentar(er)
