Computer Room Security and Maintenance Training Course

Introduction
Physical security as the foundation for overall security

Overview of Computer Room Security and Maintenance Practices
Data Center and Server Room Standards
Case Study

Infrastructure Exposure Risks
Servers
Switches
Routers
Cables
Storage
Other devices

How Data Gets Compromised
Capturing data traveling across network
Sniffer software
Plugging into a hub
Other

Server Room Access
Locks
Keys
Key codes
Log book

Authorization
Policies and Procedures
Card access
Request form
Approvals

Electronic Access Systems
Authentication
Smart card
Token
Biometric scan
Password expiration policies

Computer Room Layout and Design
Heating, ventilation, and air conditioning (HVAC)
Doors, windows and walls
Electrical Systems
Raised Floor Systems
Server Cabinet Systems
Cables
Alarms

Assessing Vulnerabilities
Evaluating the physical layout
Taking stock of devices
Temperature
Traffic
Using computer as office space
Smoking, eating, and drinking

Surveillance
Continuous monitoring
Camera placement
Motion detection
Notification options

Hardware Management and Maintenance
Workstations
Rack mount servers
Case lock down
Portables

Backup Systems
Disaster recovery
Making storage devices inaccessible

Printers
On-board memory
Paper shredders

Communication and Teamwork
Communicating security policy objectives
Getting management buy-in
Getting team member on board

Follow-up and Evaluation
Measuring Effectiveness of Security Implementation
Analyzing Effects Over Time
Patching the Holes

Keeping Up to Date
Physical Security Resources

Summary and Conclusion