f. File Protection Devices. Maximum use should be made of file protection devices and
techniques. This will aid in preventing accidental or willful destruction of files.
g. Manual Operation Procedures. Systems design should include provisions for short-term manual
operation. Such should be the case whenever possible in the event normal operations are disrupted.
h. Hardware Monitoring Prevention. Facilities should undergo a "tempest" or hardware emission
test. This will determine if computer hardware is transmitting classified data which may be intercepted
by hostile agents.
8. Evacuation and Contingency Plans. Every data processing facility security plan should include two
types of plans. These are (1) provisions for emergency evacuation/destruction plans and (2)
contingency plans. These should be provided in case something disrupts or destroys the facility.
a. Use evacuation planning to ensure effective action, if evacuation is required. Evacuation of
complex may be due to fire, flood, bomb threat, or hostile action. These plans should include the
following:
(1) Procedures for securing, and priority evacuation of, certain files.
(2) Procedures for destruction of hardware, software, and data files before evacuation.
b. Contingency planning is important in case everyday operation of the computer facility is
disrupted or destroyed. Such planning should provide for continued operation with auxiliary power
sources or alternate equipment.
PART B - LOGISTICAL SUPPORT ACTIVITIES
1. Every post has a logistical support activity. Examples are transportation warehouses, engineer
yards, self-service stores, PDO, etc. Yet, these places are often neglected by our security people,
because they are often "out of sight, out of mind." Also, there is not much regulatory guidance for
security of these types of facilities. Planning protective measures from "the ground up" is a large, but
often overlooked, aspect of an effective post physical security program. Certain elements should be
planned for in advance at the "drawing board" rather than later as an afterthought. Location of storage
areas on the post and the design of each facility must be considered. Planning will include the interior
arrangement and installation of adequate protection measures. These would include locking devices,
IDSs, fences and other barriers. Wall, floor, and ceiling construction as well as protective lighting would
be included in planning. Using foresight in planning can conserve personnel by reduction of guards
needed after a facility is in use. Physical security should be considered early in planning for new
facilities. To ensure this, the provost marshal or security officer should serve on the planning board.
Knowing what to look for at a facility and offering valuable
MP1003
2-8
Previous Page
