Case 3

CASE 3: BIG APPLE FINANCIALS PHYSICAL SECURITY

BIG APPLE FINANCIALS, INC. 

It is a fnancial services frm lcate! in Ne" Yr# Cit

%$

It #ee&s client investment an! acc'nt in(rmatin n a server at its Br#l$n !ata center%



S'c) in(rmatin incl'!e t)e ttal val'e ( t)e &rt(li* t$&e ( investments ma!e* t)e incme str'ct're ( eac) client* an! assciate! ta+ lia,ilities%



 T)e cm&an$ )as recentl$ '&-ra!e! its "e,site t all" clients t access t)eir investment in(rmatin%

BIG APPLE FINANCIALS, INC. 

.ata center is in t)e ,asement ( a rente! ,'il!in-%



/ana-ement ,elieves t)at lcatin is sec're en'-) t &rtect t)eir !ata (rm &)$sical t)reats%



Cntrls im&lemente! (r servers: )'se! in a rm "it) sm#e !etectrs* s&rin#lers* enclse! "it) tem&erat're0cntrlle! air0cn!itinin-%



Auditor’s Concern 0 Sme ( t)e meas'res at t)e c'rrent lcatin are ina!e1'ate an! ne"er alternatives s)'l! ,e e+&lre!%



Management’s Concern 2 Hi-) cst ( &'rc)asinne" e1'i&ment an! relcatin- its !ata center%

REQIRE! % 4)$ are Bi- A&&le5s a'!itrs stressin- t)e nee! t )ave a ,etter &)$sical envirnment (r t)e server6 7% .escri,e si+ cntrl (eat'res t)at cntri,'te t t)e &)$sical sec'rit$ ( t)e cm&'ter center% 3% Bi- A&&le mana-ement is cncerne! a,'t t)e cst ( relcatin- t)e !ata center% .isc'ss sme &tins &en t t)em t)at c'l! re!'ce t)eir &eratin- csts an! &rvi!e t)e sec'rit$ t)e a'!itr5s see#%

BE""ER P#$SICAL EN%IR&NMEN"  T)e a'!itrs ( Bi- A&&le Financials* Inc% see t)e nee! t )ave a ,etter &)$sical envirnment ,eca'se all t)e in(rmatin nee!e! t cn!'ct t)e &eratins are cntaine! in t)e server% Envirnmental )a8ar!s s'c) as fres* 9!s* "in!* eart)1'a#es* r &"er 'ta-es &se an e1'all$ a--ravatin- t)reat li#e t)se arisin- (rm )'man (actrs% Alt)'-) t)ese inci!ents ma$ nt )a&&en (re1'entl$* t)e$ ma$ &aral$8e t)e cm&an$5s actins an! ,rin- a,'t fnancial an! &eratinal ramifcatins% T)e &lacement ( t)e !ata center in t)e ,asement -reatl$ en)ances its e+&s're t 9!s% Als* t)e s(t"are c)ec#s an! t)er cntrl meas'res c'rrentl$ ,ein- em&l$e! ,$ t)e cm&an$ are ins'cient t avi! s'c) lsses% T)'s* it is ( -reat im&rtance (r Bi- A&&le Financial* Inc% t )ave a "r#a,le !isaster recver$ &lan in &lace t &rtect t)e server in t)e event ( an a!versit$% S'c) recver$ &lan s)'l! ,e (easi,le* !ele-ate! t res&nsi,le

C&N"R&L FEA"RES 

P'(sica) Location: T)e cm&'ter center s)'l! ,e lcate! in an area t)at minimi8es its e+&s're t )'man0ma!e an! nat'ral )a8ar!s* s'c) as &rcessin- &lants* -as an! "ater mains* air&rts* )i-)0crime areas* 9! &lains* an! -el-ical (a'lts% It s)'l! als ,e a"a$ (rm nrmal trac* s'c) as t)e t& 9r ( a ,'il!in- r in se&arate* sel(0cntaine! ,'il!in-%



Construction: I!eall$* a cm&'ter center s)'l! ,e lcate! in a sin-le0stre ,'il!in- ( sli! cncrete "it) cntrlle! access% Utilit$ an! cmm'nicatin lines s)'l! ,e 'n!er-r'n!% T)e ,'il!in- "in!"s s)'l! nt ,e e+cessivel$ lar-e an! lc#in- !evices n !rs an! "in!"s s)'l! ,e maintaine! as a sec'rit$ strate-$% An air fltratin s$stem s)'l! ,e in &lace t)at is ca&a,le ( e+cl'!in- !'st* &llen* an! !'st mites%

C&N"R&L FEA"RES 

Access* Access s)'l! ,e limite! t &eratrs an! t)er em&l$ees ") "r# t)ere% P)$sical cntrl* s'c) as lc#e! !rs* s)'l! ,e em&l$e! t limit access t t)e center% Pr-rammers an! anal$sts ") nee! access t crrect &r-ram errrs s)'l! ,e re1'ire! t si-n in an! 't% Acc'rate recr!s ( s'c) events m'st ,e maintaine!% T)e main entrance t t)e cm&'ter center s)'l! ,e t)r'-) a sin-le !r% Alternative r'tes* s'c) as fre e+its* s)'l! ,e accessi,le nl$ ")en t)e sit'atin is necessar$% ;i!e s'rveillance an! t)er cntrls are als a!visa,le%



Air Conditioning: Cm&'ters &erate ,est in a tem&erat're ran-e (