Physical Security Recommendations

• Restrict access to the Trusted Solaris system. The most secure locations are generally interior rooms that are not on the ground floor.

• Monitor and document access to the Trusted Solaris system.

• Secure computer equipment to large objects such as tables and desks to prevent theft. When equipment is secured to a wooden item, increase the strength of the item by adding metal plates.

• Consider removable storage media for sensitive information. Lock up all removable media when not in use.

• Store system backups and archives in a secure location separate from the location of the Trusted Solaris system.

• Restrict physical access to the backup and archival media in the same manner as access to the Trusted Solaris system.

• Install a high-temperature alarm in the computer facility to indicate when the temperature is outside of the range of the manufacturer's specifications. A suggested range is 10oC to 32oC (50oF to 90oF).

• Install a water alarm in the computer facility to indicate water on the floor, in the subfloor cavity, and in the ceiling.

• Install a smoke alarm to indicate fire, and Install a fire-suppression system.

• Install a humidity alarm to indicate too much or too little humidity.

• Consider TEMPEST shielding if machines do not have it. TEMPEST shielding may be appropriate for facility walls, floors, and ceilings.

• Only certified technicians should open and close TEMPEST equipment to ensure its ability to shield electromagnetic radiation.

• Check for physical gaps that allow entrance to the facility or the rooms containing computer equipment. Look for openings under raised floors, in suspended ceilings, in roof ventilation equipment, and in adjoining walls between original and secondary additions.

• Prohibit eating, drinking, and smoking in computer facilities or near computer equipment. Establish areas where these activities can occur without threat to the computer equipment.

• Protect architectural drawings and diagrams of the computer facility.

• Restrict the use of building diagrams, floor maps, and photographs of the computer facility.