The arrangements for working in secure areas include controls for the employees and external party users working in the secure area and they cover all activities taking place in the secure area. (NL ISO/IEC, 2015) 10. Delivery and Loading Areas Access points such as delivery and loading areas and other points where unauthorized persons could enter the premises should be controlled and, if possible, isolated from information processing facilities to avoid unauthorized access. The following guidelines should be considered: a) access to a delivery and loading area from outside of the building should be restricted to identified and authorized personnel; b) the delivery and loading area should be designed so that supplies can be loaded and unloaded without delivery personnel gaining access to other parts of the building; c) the external doors of a delivery and loading area should be secured when the internal doors are opened; d) incoming material should be inspected and examined for explosives, chemicals or other hazardous materials, before it is moved from a delivery and loading area; e) incoming material should be registered in accordance with asset management procedures on entry to the site; f) incoming and outgoing shipments should be physically segregated, where possible; g) incoming material should be inspected for evidence of tampering en route. If such tampering is discovered it should be immediately reported to security personnel. (NL ISO/IEC, 2015) 11. Equipment To prevent loss, damage, theft or compromise of assets and interruption to the organization’s operations. 11.1. Equipment Siting and Protection Equipment should be sited and protected to reduce the risks from environmental threats and hazards, and opportunities for unauthorized access. The following guidelines should be considered to protect equipment: a) equipment should be sited to minimize unnecessary access into work areas; b) information processing facilities handling sensitive data should be positioned carefully to reduce the risk of information being viewed by unauthorized persons during their use; c) storage facilities should be secured to avoid unauthorized access; d) items requiring special protection should be safeguarded to reduce the general level of protection required; Lebanese National Security Policy Guidelines v1.7 Page 36 |