e) controls should be adopted to minimize the risk of potential physical and environmental threats, e.g. theft, fire, explosives, smoke, water (or water supply failure), dust, vibration, chemical effects, electrical supply interference, communications interference, electromagnetic radiation and vandalism; f) guidelines for eating, drinking and smoking in proximity to information processing facilities should be established; g) environmental conditions, such as temperature and humidity, should be monitored for conditions which could adversely affect the operation of information processing facilities; h) lightning protection should be applied to all buildings and lightning protection filters should be fitted to all incoming power and communications lines; i) equipment processing confidential information should be protected to minimize the risk of information leakage due to electromagnetic emanation. (NL ISO/IEC, 2015) 11.2. Supporting Utilities Equipment should be protected from power failures and other disruptions caused by failures in supporting utilities. Supporting utilities (e.g. electricity, telecommunications, water supply, gas, sewage, ventilation and air conditioning) should: a) conform to equipment manufacturer’s specifications and local legal requirements; b) be appraised regularly for their capacity to meet business growth and interactions with other supporting utilities; c) be inspected and tested regularly to ensure their proper functioning; d) if necessary, be alarmed to detect malfunctions; e) if necessary, have multiple feeds with diverse physical routing. Emergency lighting and communications should be provided. Emergency switches and valves to cut off power, water, gas or other utilities should be located near emergency exits or equipment rooms. Additional redundancy for network connectivity can be obtained by means of multiple routes from more than one utility provider. (NL ISO/IEC, 2015) 11.3. Cabling Security Power and telecommunications cabling carrying data or supporting information services should be protected from interception, interference or damage. The following guidelines for cabling security should be considered: Lebanese National Security Policy Guidelines v1.7 Page 37 |