FORESEC Academy Security

Essentials (I) :

Physical Security

Networking Concepts

Agenda
Significance

of Physical Security

Objectives

- Safety
- Authorized Access

Significance
Physical

Security is:
- Implicit in every Logical Security
Control
- Usually based on assumptions
- Often overlooked

Keycatcher

Skimmer

Physical Security
Confidentiality
Integrity

Availability
Safety

Safety
Safety

is #1
Impact on other objectives
- Authorized Access
- Availability

Evacuation: Procedures
Evacuation

Routes
Meeting Point
Posting
Practice

Evacuation: Roles
Safety

Warden
Meeting Point Leader
Employee

True Story
Evacuation

of 750,000
During Hurricane Andrew, which hit Southern Florida
in August 1992, hurricane watches and warnings
allowed emergency services to issue a voluntary,
then mandatory, evacuation order. Eventually,
more than 750,000 individuals were evacuated out
of harm's way. This notification and evacuation is
considered the primary reason for the remarkably
low number of injuries and fatalities during and
immediately after the storm.

Threats to Safety
Smoke

& Fire

Toxins
Water/Flood
Temperature

extremes
Structural failures
Power loss
External bomb threat, civil unrest

Smoke & Fire

Detective

- Smoke Detectors
- Heat Sensors
Suppressive
- Sprinklers (Chemical, H2O)
- Fire Extinguishers (ABC, Halon)
- Evacuation

Types of fire
A:

Combustible materials, such as

wood and paper
B: Flammable liquids, such as
petroleum and some solvents
C: Electrical wiring and
equipment

Types of fire

The Effects of Smoke in Computer Rooms

In the event of a suppressed fire in a computer room, careful

attention needs to be placed on computer equipment before
returning them to operation. Fans on computer equipment will
naturally draw in dust particles and soot from a fire, distributing
it over the motherboard and components of a computer.
Combined with water gathered from sprinklers or other firesuppression equipment, powering a computer on may cause it
to electrically short and fail.

Companies specializing in the recovery of electronics following

a fire recommend that their customers do nothing but call in a
disaster recovery company to assess damage. Even with the
best intentions, attempting to clean the equipment or even
surrounding facilities including walls, ceilings, computer cases
or racks will likely make the problem worse. An experienced
disaster recovery company will seal and localize the damage
to prevent airborne materials from affecting other equipment
and extending the damage, before starting the careful
cleaning and removal process.

Toxins
Detective

- Specialized detectors (Radon, CO)

- Third Party (News, Emergency
Warning System)
Reactive
- Evacuation

Water/Flood
Detective

- Detectors (Moisture, Humidity)

- Third Party (News, Emergency Warning
System)
Corrective
- Bilge Pump
- Evacuation

Temperature Extremes
Detective

- Thermometer
Corrective
- Redundancy - Heater / AC