When I was young, there was an amazing publication called The Whole Earth Catalog, which was one of the bibles of my generation. It was created by a fellow named Stewart Brand not far from here in Menlo Park, and he brought it to life with his poetic touch. This was in the late 1960s, before personal computers and desktop publishing, so it was all made with typewriters, scissors and Polaroid cameras. It was sort of like Google in paperback form, 35 years before Google came along: It was idealistic, and overflowing with neat tools and great notions.
Ohio law requires students that entered 9th grade before July 1, 2022 to receive instruction in financial literacy as part of the high school graduation requirements. However, it is up to local districts to determine how to best meet the needs of their students. For example, the financial literacy content may be incorporated into another course, or some districts may require students to take a standalone financial literacy course for a half credit that can meet either a graduation requirement for social studies or an elective.
Introduction to Physical Security
Commonly Asked Questions
Policy Issues
Physical Security Countermeasures
Physical Security Checklist Introduction to Physical SecurityMost people think about locks, bars, alarms, and uniformed guards whenthey think about security. While these countermeasures are by nomeans the only precautions that need to be considered when trying tosecure an information system, they are a perfectly logical place to begin.Physical security is a vital part of any security plan and is fundamental to allsecurity efforts--without it, information security (Chapter 6), softwaresecurity (Chapter 7), user access security (Chapter 8), and networksecurity (Chapter 9) are considerably more difficult, if not impossible, toinitiate. Physical security refers to the protection of building sites andequipment (and all information and software contained therein) fromtheft, vandalism, natural disaster, manmade catastrophes, and accidentaldamage (e.g., from electrical surges, extreme temperatures, and spilledcoffee). It requires solid building construction, suitable emergencypreparedness, reliable power supplies, adequate climate control, and appropriate protection from intruders.
Commonly Asked QuestionsQ.How can I implement adequate site security when I am stuck in anold and decrepit facility?
A.Securing your site is usually the result of a series of compromises--what you need versus what you can afford and implement. Ideally, oldand unusable buildings are replaced by modern and more serviceablefacilities, but that is not always the case in the real world. If you findyourself in this situation, use the risk assessment process described inChapter 2 to identify your vulnerabilities and become aware of your preferred security solutions. Implement those solutions that you can, withthe understanding that any steps you take make your system that muchmore secure than it had been. When it comes time to argue for newfacilities, documenting those vulnerabilities that were not addressed earliershould contribute to your evidence of need.Q.Even if we wanted to implement these physical security guidelines,how would we go about doing so?
A.Deciding which recommendations to adopt is the most important step.Your risk assessment results should arm you with the informationrequired to make sound decisions. Your findings might even show that notevery guideline is required to meet the specific needs of your site (andthere will certainly be some variation based on need priorities). Oncedecided on, however, actually initiating a strategy is often as simple asraising staff awareness and insisting on adherence to regulations. Somestrategies might require basic "'handyman"' skills to install simple equipment(e.g., key locks, fire extinguishers, and surge protectors), while othersdefinitely demand the services of consultants or contractors with specialexpertise (e.g., window bars, automatic fire equipment, and alarmsystems). In any case, if the organization determines that it is necessaryand feasible to implement a given security strategy, installing equipmentshould not require effort beyond routine procedures for completing internalwork orders and hiring reputable contractors.
Determining countermeasures often requires creativity: don't limit yourself to traditional solutions.
Q.What if my budget won't allow for hiring full-time security guards?
A. Hiring full-time guards is only one of many options for dealing withsecurity monitoring activities. Part-time staff on watch duringparticularly critical periods is another. So are video cameras and the use ofother staff (from managers to receptionists) who are trained to monitorsecurity as a part of their duties. The point is that by brainstorming a rangeof possible countermeasure solutions you can come up with severaleffective ways to monitor your workplace. The key is that the function isbeing performed. How it is done is secondary--and completely up to theorganization and its unique requirements.
Guidelines for security policy development can be found in Chapter 3.
Policy Issues
Physical security requires that building site(s) be safeguarded in a way thatminimizes the risk of resource theft and destruction. To accomplishthis, decision-makers must be concerned about building construction, roomassignments, emergency procedures, regulations governing equipmentplacement and use, power supplies, product handling, and relationshipswith outside contractors and agencies.The physical plant must be satisfactorily secured to prevent thosepeople who are not authorized to enter the site and use equipment fromdoing so. A building does not need to feel like a fort to be safe. Well-conceivedplans to secure a building can be initiated without adding undueburden on your staff. After all, if they require access, they will receive it--as long as they were aware of, and abide by, the organization's statedsecurity policies and guidelines (see Chapter 3). The only way to ensurethis is to demand that before any person is given access to your system,they have first signed and returned a valid Security Agreement. Thisnecessary security policy is too important to permit exceptions.
As discussed more completely in Chapter 2, a threat is any action, actor, or event that contributes to risk
Physical Threats (Examples)Examples of physical threats include: