Physical Security

Local authorities must perform a review of physical security. This should include:

• Electronic or key-coded access controls at perimeter
• Door Closures to prevent doors remaining open
• Regular review of who has access
• Change of access codes on a monthly basis
• Eye-level signage that area is RESTRICTED

All equipment MUST be secured before GCSx connection can "go live".

More Guidance is available from the CPNI website

---

Suggested solutions

Encription

Tiger Certified Encription Limited can carry out a full physical security audit, give you our findings and make recommendations. Give us a call 01905 754440 or go to http://encription.co.uk/public-sector.php

IBM

Secure your physical working environment with an in-depth review of security controls and processes for your site or throughout your enterprise More information can be found here

Sapphire

Local Authorities are required to ensure that all equipment is located in secure accommodation in line with best practice. Sapphire promotes best practice by adhering to information security standards such as ISO27001. Sapphire can use the Physical Security Assessment Questionnaire and the Physical Security Baseline Controls Matrix as required by the Security Policy Framework Mandatory Requirement 51. In addition to this, Sapphire can conduct physical / environmental security reviews and benchmarking at clients locations. Its consultancy team regularly conducts extensive social engineering exercises to test the robustness of these controls to mitigate against risks. For further information please email Coco Information or call 01642 702100.