APPENDIX A (NORMATIVE) PHYSICAL CONTROLS, continued Minimal (All Mandatory) Equipment maintenance • Only authorised personnel should carry out repairs and service equipment • Records should be kept of all suspected or actual faults, and all preventive/corrective maintenance Security of equipment offPremises • Equipment/media taken off site should not be left unattended • Portable computers should be carried as hand luggage Control Class • Adequate insurance cover should be in place Secure disposal or re-use of equipment Removal of property • Equipment, information or software should not be taken off-site without prior authorization • Equipment should be recorded as being removed off-site and recorded when returned Monitoring • Physical guard at entrance during the business hours. NATIONAL INFORMATION ASSURANCE MANUAL 52