Figure 4-11.UPS with onsite generation.
When this configuration is used, maintain a close
communication liaison with the power plant source to
ensure the generator is coming up to normal speed for
the switchover from UPS. The UPS system takes over
automatically, and the change in power source may not
be noticed in the AIS facility. However, when the UPS
system changes over to the generator, it may require a
manual power panel setting in the AIS facility by the
AIS technical manager.
AIS FACILITY PHYSICAL PROTECTION
The physical protection of the AIS facility can be
thought of as the process of permitting access to the
facility by authorized persons, while denying access to
others. The physical protection of an AIS facility is not
as stringent for an AIS facility that processes
unclassified data as it is for an AIS facility that
processes classified data. In the following
example/discussion, assume the facility processes
classified material and provides physical protection in
accordance with OPNAVINST 5510.1 and
OPNAVINST 5530.14. Pay particular attention to
applying physical protection and security policy
wherever AIS equipment is used for processing
classified information in accordance with
OPNAVINST 5239.1.
Ensure plans are developed for the protection,
removal, or destruction of classified material in the case
of a natural disaster, civil disturbance, or enemy action.
The plans should establish detailed procedures and
responsibilities for the protection of classified material
so that it does not fall into unauthorized hands in the
event of an emergency. Also, indicate what material is
to be guarded, removed, or destroyed. An adequate
emergency plan for classified material should provide
for guarding the material, removing the classified
material from the area, complete destruction of the
classified material on a phased priority basis, or
appropriate combinations of these actions.
The emergency plans should also provide for the
protection of classified information in a manner that
minimizes the risk of loss of life or injury to AIS
personnel. The immediate placement of a trained and
preinstructed perimeter guard force around the affected
area to prevent the removal of classified material is an
acceptable means of protecting the classified material.
This action reduces the risk of casualties.
Security requirements for the central computer AIS
facility area should be commensurate with the highest
classified and most restrictive category of information
being handled in the AIS. If two or more computer
systems are located in the same controlled area, the
equipment comprising each system may be located so
that direct personnel access, if appropriate, is limited to
a specific system.
Boundary Protection
The threat analysis may indicate the need to protect
the property boundary of the AIS facility. This may be
accomplished by installing fences or other physical
barriers, outside lighting, or perimeter intrusion
detectors, or by using a patrol force. Often a
combination of two or more of these will be sufficient.
Fences should be 8 feet high with three strands of
barbed wire. Fences provide crowd control, deter
casual trespassers, and help in controlling access to the
entrances; however, they do not stop the determined
intruder.
In situations where manpower shortages exist, the
fence can be equipped with penetration sensors that
should sound an internal alarm only. This type of
4-23