4.2.
Segregation in Networks................................................................................................. 26
4.3.
Security of Network Services ........................................................................................... 27
4.4.
Electronic Messaging...................................................................................................... 27
5.
Mobile Device Policy ............................................................................................................. 28
6.
Information Transfer Policies and Procedures ........................................................................ 29
6.1.
Agreements on Information Transfer............................................................................... 30
Part 4: Physical and Environmental Security........................................................................... 32
1.
Purpose ............................................................................................................................... 32
2.
Introduction......................................................................................................................... 32
3.
Secure areas......................................................................................................................... 32
4.
Physical security perimeter ................................................................................................... 33
5.
Physical Entry Controls.......................................................................................................... 34
6.
Securing Offices, Rooms and Facilities.................................................................................... 34
7.
Server Rooms and Data Center Security ................................................................................. 35
8.
Protecting Against External and Environmental Threats .......................................................... 35
9.
Working in Secure Areas ....................................................................................................... 35
10.
Delivery and Loading Areas ................................................................................................... 36
11.
Equipment ........................................................................................................................... 36
11.1.
Equipment Siting and Protection ................................................................................. 36
11.2.
Supporting Utilities..................................................................................................... 37
11.3.
Cabling Security.......................................................................................................... 37
11.4.
Equipment Maintenance ............................................................................................. 38
11.5.
Removal of Assets ...................................................................................................... 38
11.6.
Security of Equipment and Assets Off-Premises............................................................ 39
11.7.
Secure Disposal or Re-use of Equipment ...................................................................... 40
11.8.
Unattended User Equipment....................................................................................... 40
11.9.
Clear Desk and Clear Screen Policy............................................................................... 41
12.
Management of Removable Media........................................................................................ 41
Part 5: Operations Security and Business continuity ............................................................. 43
1.
Purpose ............................................................................................................................... 43
2.
Introduction......................................................................................................................... 43
Lebanese National Security Policy Guidelines v1.7
Page
7|