Chapter 4 – Information Technology

49020.8.4 Data Processing Equipment Siting and Protection

• Data processing equipment shall be sited and protected to reduce the risks from environment threats and hazards, and opportunities for unauthorized access.

• The following guidelines shall be applied to protect equipment:

  • Equipment should be sited to minimize unnecessary access into work areas;

  • Facilities handling sensitive data should be positioned and the viewing angle restricted to reduce the risk of information be viewed by unauthorized persons during their use, and storage facilities secured to avoid unauthorized access;

  • Items requiring special protection should be isolated to reduce the general level of protection required;

  • Controls shall be adopted to minimize the risk of potential physical threats, e.g., theft, fire, explosive, smoke, water (or water supply failure), dust, vibration, chemical effects, electrical supply interference, communications interference, electromagnetic radiation, and vandalism;

  • Guidelines for eating, drinking, and smoking in proximity to facilities should be established;

  • Equipment processing confidential and/or sensitive information shall be protected to minimize the risk of information leakage due to emanation.