Document No

STANDARD OPERATING PROCEDURE [Document Number]

<ENTER COMPANY LOGO> Revision: [00]
TITLE Effective date
Physical Security [Effective Date]

APPROVALS:
Name Signature Date

REVISION HISTORY:
Revision Initials and Date Summary of Changes
00

Instructions on completing this document

(Please remove this table when you are finished modifying this document.
This table is for your information only.)

- Montrium has inserted instructions in blue text into this document to help you
understand the information in each section. Once you have modified this
document to meet the specifics of your organization, please delete the blue text.

- Blue italicized text in this document indicates elements which should be revised
or completed by you so that the text meets your company’s needs and quality
system requirements. Once you have completed this information, please remove
the italics in the document.

Confidential Page 1 of 7
 Document No
STANDARD OPERATING PROCEDURE [Document Number]
<ENTER COMPANY LOGO> Revision: [00]
TITLE Effective date
Physical Security [Effective Date]

Contents
1.0 PURPOSE .............................................................................................................................. 3
2.0 SCOPE .................................................................................................................................. 3
3.0 DEFINITIONS ........................................................................................................................ 3
3.1 Acronyms ......................................................................................................................... 3
3.1.1 IT – Information Technology ................................................................................... 3
3.1.2 QA – Quality Assurance ........................................................................................... 3
3.1.3 SAN – Storage Area Network................................................................................... 3
3.1.4 UPS – Uninterruptible Power Supply....................................................................... 3
3.1.5 VPN – Virtual Private Network ................................................................................ 3
3.2 Terms ............................................................................................................................... 3
3.2.1 Building Management Group .................................................................................. 3
3.2.2 Physical Security ...................................................................................................... 3
4.0 RESPONSIBILITY ................................................................................................................... 4
4.1 IT Manager, representative or designee ......................................................................... 4
4.2 Personnel ......................................................................................................................... 4
5.0 PROCEDURE ......................................................................................................................... 4
5.1 Building Access ................................................................................................................ 4
5.2 Security for Premises ....................................................................................................... 5
5.3 Server Room Access ........................................................................................................ 5
5.4 Compromised Access Medium (RFID Badge or Keys)...................................................... 6
5.5 Visitor Access ................................................................................................................... 6
5.6 Physical Security Issues ................................................................................................... 6
5.7 Environmental Controls ................................................................................................... 7
5.7.1 Humidity and Temperature Controls ...................................................................... 7
5.7.2 Fire Suppression System .......................................................................................... 7
5.7.3 Alternate Power Supplies ........................................................................................ 7
5.8 Periodic Review ............................................................................................................... 7
6.0 REFERENCES ........................................................................................................................ 7

Confidential Page 2 of 7
 Document No
STANDARD OPERATING PROCEDURE [Document Number]
<ENTER COMPANY LOGO> Revision: [00]
TITLE Effective date
Physical Security [Effective Date]

1.0 PURPOSE Commented [MTM1]: In this section, you should insert a short
statement describing the purpose of the procedural document to
The purpose of this procedure is to describe Company Name application of physical security describe why it is needed, and what it is being implemented to
accomplish.
measures to protect data and users.
If the text in Section 1 is acceptable, you need only insert your
Company name to replace the italicized field.
2.0 SCOPE Commented [MTM2]: In this section, you should insert a short
statement describing the scope of the procedural document,
This procedure applies to employees and contractors working within Company Name offices and outline the reason the document was created and define its
intended audience.
facilities located at Company location.
Company Name is responsible for controlling physical access to the following: If the text in Section 2 is acceptable, you need only insert your
Company name to replace the italicized field.
• Server rooms
• Executive suite and administration office
• Laboratory doors on number floor
• High Density Storage spaces on the number floor
Overall physical security of the building is managed by Building Management Company referred
to herein as the “Building Management Group”, this includes:
• Parking area
• Stairways
• Elevators
• External access doors

3.0 DEFINITIONS Commented [MTM3]: In this section define acronyms and

terms that would help team members better understand the
3.1 Acronyms content of this Procedure.

3.1.1 IT – Information Technology

3.1.2 QA – Quality Assurance
3.1.3 SAN – Storage Area Network
3.1.4 UPS – Uninterruptible Power Supply
3.1.5 VPN – Virtual Private Network
3.2 Terms
3.2.1 Building Management Group
The Building Management Group may be internal to the company or a 3rd party vendor who
supervises the hard and soft services of the built structure, ensuring that the security, health
and safety, and maintenance of the built structure are in place.
3.2.2 Physical Security
Protection of personnel, hardware, programs, networks, and data from physical circumstances
and events that could cause serious losses or damage to an enterprise, agency, or institution.

Confidential Page 3 of 7
 Document No
STANDARD OPERATING PROCEDURE [Document Number]
<ENTER COMPANY LOGO> Revision: [00]
TITLE Effective date
Physical Security [Effective Date]

4.0 RESPONSIBILITY Commented [MTM4]:

4.1 IT Manager, representative or designee

4.2 Personnel

5.0 PROCEDURE
5.1 Building Access Commented [MTM5]:

Confidential Page 4 of 7
 Document No
STANDARD OPERATING PROCEDURE [Document Number]
<ENTER COMPANY LOGO> Revision: [00]
TITLE Effective date
Physical Security [Effective Date]

5.2 Security for Premises Commented [MTM6]:

5.3 Server Room Access Commented [MTM7]:

Confidential Page 5 of 7
 Document No
STANDARD OPERATING PROCEDURE [Document Number]
<ENTER COMPANY LOGO> Revision: [00]
TITLE Effective date
Physical Security [Effective Date]

5.4 Compromised Access Medium (RFID Badge or Keys) Commented [MTM8]:

5.5 Visitor Access Commented [MTM9]:

5.6 Physical Security Issues Commented [MTM10]:

Confidential Page 6 of 7
 Document No
STANDARD OPERATING PROCEDURE [Document Number]
<ENTER COMPANY LOGO> Revision: [00]
TITLE Effective date
Physical Security [Effective Date]

5.7 Environmental Controls Commented [MTM11]:

5.7.1 Humidity and Temperature Controls

Commented [MTM12]: I

5.7.2 Fire Suppression System Commented [MTM13]:

5.7.3 Alternate Power Supplies Commented [MTM14]:

6.0 REFERENCES
Document Number Document Title

Confidential Page 7 of 7