Article 45 – Information Security
49020.8.1 Use of Secure Areas to Protect Data and Information
-
Use physical methods to control access to areas. These methods include, but are not limited to, locked doors, secured cage areas, vaults, IDInstitutions Division (see DAI) cards, and biometrics.
-
Restrict building access to authorized personnel.
-
Identify areas within a building that should receive special protection and be designated as a secure area. An example is a server room.
-
Security methods should be commensurate with security risk.
-
Ensure that physical barriers are used to prevent contamination from external environmental sources.
-
Compliance with fire codes.
-
Installation, use and maintenance of air handling, cooling, UPS and generator backup to protect the ITInformation Technology investment in server rooms.