Physical Security in IT systems

Physical security is the term used to describe protection needed outside the computer system. Typical physical security controls include guards, locks, and fences to deter direct attacks, floods and Power outages etc.. are the part of physical security.

IT systems of an organization is focus on fulfill its tasks, correctly and uninterrupted functioning. The term physical security of IT systems is used to refer to security issues related to computer systems, computer networks, communication systems, electrical power systems, buildings and also issues that related to people who operate, maintain and manage of a particular organization.

Depending on the organization physical security will vary. A government agency such as the Department of Defense may have armed guards at the door of the building. Many organizations are not in the position of breaching national security so armed guards are not a necessity. But in order to providing security in different approaches and understanding of the physical security of IT system, that can be categorized in to three main security control areas called,

 The physical facility in which the IT systems are installed and operated.

IT systems that can be installed statically (building or collection of buildings), portably (installed in a place that seems to be statics, but can be move if we wants. It systems in a large container is example for this kind) or mobility (installed in a vehicle).

According to the installed structure the level of physical threats to the system may be vary. In this area focus on fire in the building, roof leaks in networking room, unauthorized accesses of the system, water pump leak in the building etc.

 The physical location at which the IT systems are installed and operated.

Location of IT system installed is vary according to the IT system installed type(that mean static, portable or mobile).If system is static, that is situated in a fixed geographic location, If system is portable that there may be predefine list of places that the system could be move. If there is mobile installation, that it does not have fixed geographic location.

Threat	Example
Natural threats	Flooding, fire, tornado, Tsunami, volcano, storms, earthquakes etc. (Although not natural disasters, building collapse, explosion, and damage from falling objects can be considered in the same category. These kinds of catastrophes are difficult to predict or estimate)
Man-made threats	sabotage, burglary, civil war, Interception of Sensitive Information etc.
Damages to the system due to nearby activities	Explosion, electromagnetic interference etc.

     The supporting facilities and services required and used by the IT systems.

In this category that can be identified two areas (facilities and services).They are

1.       Human supporting services.

2.       Technical supporting facilities.

System operations usually depends on electric power, telecommunication, air condition of that geographical area etc. If these facilities not enough good, that will cause a physical damage to the system hardware or system data.