Title

Server systems must be located in a controlled access area, accessible only to authorized personnel. (Cat II impact)

Discussion

Inadequate physical protection can undermine all other security precautions utilized to protect the system. This can jeopardize the confidentiality, availability, and integrity of the system. Physical security is the first line of protection of any system.

Check Content

Verify servers are located in controlled access areas that are accessible only to authorized personnel. If systems are not adequately protected, this is a finding.

Fix Text

Ensure servers are located in secure, access-controlled areas.

Additional Identifiers

Rule ID:

Vulnerability ID: V-1070

Group Title:

Expert Comments

CCIs tied to check.

Controls tied to check. These are derived from the CCIs shown above.