Entry control. Control of the entry to the premises of data processing systems (DP system) by unauthorised persons. Entry control must prevent persons who are not authorised from being able to get near a DP system. The DP systems include, in addition to the central unit including the integrated drives, the connected peripheral units such as terminals, PCs, printers, plotter and tape units, etc. Also included are the end devices used for remote access. Entry control to PCs within office spaces is ensured, e.g. by measures that are taken to prevent customers from getting near the PCs or being able to view the screen. Measures to meet the protection objectives Entry regulation for persons outside of the company; the implementation is carried out by the following points: • Regulations for entry by external persons • Logging of the arrival and departure of non-company persons • Availability of central reception area (gatekeeper/reception) • Issuance of visitors ID • Presence of non-company personnel anywhere in the company building only in the presence of employees • Return of access equipment after the authorisation has expired Entry regulation for company personnel; the implementation is carried out by the following points: • Determination of persons authorised to enter, including the scope of the authorisations, for physical access to relevant rooms/security areas • Issuance of entry authorisation cards (e.g. chip card with logging) • Logging of employees’ arrival and departure Determination of persons authorised to enter the computer/server room Measures so that only authorised entry to the computer/server room occurs Provision of lockable cabinets/rolling containers for employees Key control if keys are used, (locked doors; issue keys only to authorised persons; storage and use of a general key) Measures for object protection (e.g. protection of ducts and windows; area monitoring) Secured entrance (e.g. locking system, ID reader) Burglar resistance window
Appears in 5 contracts
