Chapter 4 – Information Technology

49020.7.1 Use of Secure Areas to Protect Data and Information

• The use of secure areas to protect data and information shall adhere to the following:

  • Use physical methods to control access to areas. These methods include, but are not limited to, locked doors, secured cage areas, vaults, IDInstitutions Division (see DAI) cards, and biometrics.

  • Restrict building access to authorized personnel.

  • Identify areas within a building that should receive special protection and be designated as a secure area. An example is a server room.

  • Security methods should be commensurate with security risk.

  • Ensure that physical barriers are used to prevent contamination from external environmental sources.

  • Compliance with fire codes.

  • Installation, use and maintenance of air handling, cooling, uninterruptible power supply and generator backup to protect the ITInformation Technology investment in server rooms.