operational programs are housed together. With these, also are the processing main storage units and
remote components. Security personnel should set up measures to survey the building housing the
AIS facilities. This should be done before physical security measures are determined.
a. Building Design. New as well as existing structures must be evaluated. This is needed to
determine accessibility by unauthorized persons in operations areas of a computer complex. Basement
or below-ground level facilities require special design. These areas must be guarded against water
damage. If possible, locate the equipment in the center of the building. This affords maximum
protection and is away from other activities. Windows should be avoided to prevent forced entry
problems.
b. Protective Measures. The degree of security required for computer complexes will depend on
its accreditation level, location, environment, and vulnerability to security threats. Based on risk
analysis done IAW AR 190-51 and DA Pam 190-51 personnel must determine the degree of protection
required.
(1) Protective Barriers. A highly recommended room would be one room having four solidly
built windowless walls. These would extend from the true floor to the true ceiling. Protective barriers to
be considered include the following:
(a) Windows. Ground floor windows should be eliminated, if possible: Those windows
deemed necessary will be protected by rod and bar grids, steel screens, or secure shutters. Mainframe
rooms will not have windows.
(b) Doors. All doors to a central computer complex will be substantially constructed of solid-
core wood or metal, and have a 1 and 1/2 hour fire rating. Hinges will be mounted on the inside, or if
this is not possible, the hinge pins will be welded, pinned, or brazed to hinder removal. Doors, other
than those used for primary access, will be secured from the inside and be devoid of external locking
hardware. These doors will be equipped with appropriate hardware to permit rapid opening during fires
or other emergencies.
(c) Fences. Fences may be used as a measure to provide the required dual level of
protection. Fences will meet requirements of OCE Drawing 40-16-10, FE-6. Some existing fences are
in good repair but do not meet this criteria. They do provide adequate security, however, with a 6-foot
fabric. Such fences will not be replaced solely to comply with this requirement.
(2) Locking devices.
(a) Cylinder locks. Single doors, which are locked after duty hours, should be secured with
a dead bolt having a 1-inch throw. Double doors should be secured using locking hardware devices.
Also, locking hardware may be used if the facility is extremely vulnerable.
MP1003
2-2
Previous Page
