l Natural disaster protection.  The effects of you,  and  never  hesitate  to  challenge  or  question someone or something that you feel is wrong or out of character. PHYSICAL SECURITY MEASURES Physical security is the one area with which you are most likely to be familiar. It deals with such things as personnel, the environment, the facility and its power supply(ies), fire protection, physical access, and even the protection of software, hardware, and data files. Your command must provide physical security for your AIS facility. The degree of physical security at your installation or command depends on its physical characteristics,   its   vulnerability   within   the   AIS environment,  and  the  type  of  data  processed.  Minimum physical security requirements include four basic areas that  your  command  must  address:  physical  security protection,   physical   access   controls,   data   file protection, and natural disaster protection. l l l Physical security protection. Physical security protection  takes  on  two  forms.  The  first  is physical barriers, such as solid walls, caged-in areas, bulletproof glass, locked doors, and even continual  surveillance  of  the  controlled  area. The second involves people and the procedures that you must follow, such as looking up names on the access list to determine who is authorized in a given space or area. There are also escort procedures you must follow to be sure that your party gets to the right place and/or person. Physical  access  controls.  Physical   access controls   are   implemented   to   prevent unauthorized entry to your computer facility or remote terminal areas. Physical access controls can   be   accomplished   in   several   ways: conventional  key  and  lock  set,  electronic  key system,   mechanical   combination   lock,   or electronic  combination  lock.  Regardless  of  the type of system installed at your command, it is important  to  remember  that  keys  belong  on  your key-ring or chain, electronic keys or cards should be in your possession at all times (except when sleeping),   and   combinations   should   be memorized,  not  written  down  somewhere  for everyone to see. Data file protection.  Physical  access  to  data files and media libraries (magnetic disks, tape files, microforms, and so on) is authorized only to those personnel requiring access to perform their job. natural disasters must be prevented, controlled, and  minimized  to  the  extent  economically feasible by the use of detection equipment (heat sensors,    smoke    detectors),    extinguishing systems,  and  well  conceived  and  tested contingency   plans. Environmental Security Temperature and humidity can affect the operation of  your^- computer    facility.    Whenever    possible, computer   equipment   is   operated   within   the manufacturer’s  optimum  temperature  and  humidity range  specification.  Fluctuations  in  temperature and/or humidity over an extended period of time can cause serious damage to the equipment. So, with that in mind, you are probably asking yourself, “What are the   acceptable   levels   for   computer   operation?” Normally,  you  can  find  this  information  in  the command’s  standard  operating  procedures  (SOPs),  or you can check with your supervisor. If neither are available, a safe rule of thumb is a temperature of 72° Fahrenheit, ±2°, and a humidity of 55%, ±5%. To maintain a constant temperature and humidity to the computer facility or remote terminal areas, keep all doors and windows closed. Because temperature and humidity   are   vitally   important   to   computer performance,  it  is  essential  that  only  designated personnel  be  allowed  to  regulate  these  types  of environmental   controls. If your workspace has a recording instrument to monitor the temperature and humidity, by all means check it periodically to be sure it is within the prescribed limits. If you notice a significant fluctuation (up or down), notify your supervisor. Some devices have built-in warning signals (a light, audible sound, or both) to warn you of near-limit conditions for temperature and/or humidity. Lighting You are responsible for ensuring that adequate lighting is maintained. Be particularly attentive to emergency lights. If they are not functioning properly, report  the  problem  to  your  supervisor  as  soon  as possible.  Emergency  lights  are  installed  for  your protection  and  safety,  not  for  the  safety  of  the equipment. They are there to ensure a quick exit if you must  evacuate  in  a  hurry. 4-8