Physical Site Security

Assessment & Compliance Services Division

847.221.0200 halock.com

Solution Overview
Solution Physical security is a critical element of information security. To prevent unauthorized access,
At-a-Glance: limit damage, and maintain the integrity of the organization’s critical information assets, physical
security controls should be established.
 Evaluate physical access
control and ensure principles
Critical or otherwise sensitive facilities such as corporate office locations, data centers, and collo-
of least privilege are utilized
cated processing facilities contain either electronic or printed assets. These assets should be
 Evaluate perimeter defenses housed in secure areas, well protected by security perimeters, with appropriate security barriers
against loss, theft, and natu-
and entry controls.
ral disaster

 Ensure physical security To identify potential

controls adequately protects risk to the organiza-
information assets tion , Halock will
 Test the operational effec- perform a review of
tiveness of security policies, physical security
procedures, and standards controls at key loca-
tions.

Professional Services Included : Pricing:

 Pricing varies based on the

 Review of documented access controls (i.e.
sign-in procedures, biometric authentication
controls, other methods of validating identity
of individuals entering the data center, visitor
escorts, etc.)
 Physical building security (preventing
unauthorized entry into the facility itself)
 Physical security controls within the facility
(preventing unauthorized access beyond the
entryway, into the protected areas of the data
center where systems are stored
 Physical controls related to the rack-space location, type, and size of
assigned to The organization (i.e. locks on each facility
the "cage" housing The organization's  Each site reviewed typically
equipment, entry logging, etc.) ranges from $2,000 to $3,500
 Security monitoring controls (security  Additional fees may apply for
guards, cameras, motion sensors, etc.) remote sites requiring over-
night travel
 Physical controls aimed at ensuring
availability of systems (i.e. battery backups,
generators, connections to regional power
grid(s), redundant power supplies within
servers, etc.)

1834 Walden Office Square, Suite 150 * Schaumburg, IL 60173 * 847.221.0200 * www.halock.com
 847.221.0200 halock.com

Physical Site Security: Scope Worksheet

The following documents are typically incorporated into the review. Please indicate additional documents that
will incorporated into the review in the empty boxes:

User Access Policy Business Continuity Plan Disaster Recovery Plan

Security Awareness Documentation Evacuation Plan Site Maps and Diagrams

Halock will interview key resources, typically including the following roles. Please indicate additional re-
sources that will interviewed as part of this process:

Facilities Manager Receptionist

The following locations will be visited:

LOCATION PURPOSE

1834 Walden Office Square Suite 150 * Schaumburg, IL 60173 * 847.221.0200 * www.halock.com