|
|
| Introduction |
Technical support staff, security administrators, system administrators,
and others may have Information Resource physical facility access
requirements as part of their function. The granting, controlling,
and monitoring of the physical access to Information Resources
facilities is extremely important to an overall security program. |
| Purpose |
The purpose of The City Of El Paso Physical Access Policy is
to establish the rules for the granting, control, monitoring,
and removal of physical access to Information Resource facilities. |
| Audience |
The City Of El Paso Physical Access Policy applies to all individuals
within The City Of El Paso enterprise that are responsible for
the installation and support of Information Resources, individuals
charged with Information Resources Security, and data owners. |
Physical Access
Policy
|
- All physical security systems will comply with applicable
all applicable regulations such as, but not limited to, building
codes and fire prevention codes.
- Physical access to all Information Resources restricted
facilities will be documented and managed.
- All IT facilities will be physically protected in proportion
to the criticality or importance of their function at The
City Of El Paso.
- Access to Information Resources facilities will be granted
only to The City Of El Paso support personnel, and contractors,
whose job responsibilities require access to that facility.
- The process for granting card and/or key access to Information
Resources facilities will include the approval of the person
responsible for the facility.
- Each individual that is granted access rights to an Information
Resources facility will receive emergency procedures training
for the facility and will sign the appropriate access and
non-disclosure agreements.
- Requests for access will come from the applicable The City
Of El Paso data/system owner.
- Access cards and/or keys will not be shared or loaned to
others.
- Access cards and/or keys that are no longer required will
be returned to the person responsible for the Information
Resources facility. Cards will not be reallocated to another
individual bypassing the return process.
- Lost or stolen access cards and/or keys will be reported
to the person responsible for the Information Resources facility.
- Cards and/or keys will not have identifying information
other than a return mail address.
- All Information Resources facilities that allow access to
visitors will track visitor access with a sign in/out log.
- A service charge may be assessed for access cards and/or
keys that are lost, stolen or are not returned.
- Card access records and visitor logs for Information Resources
facilities will be kept for routine review based upon the
criticality of theInformation Resources being protected.
- The person responsible for the Information Resources facility
will remove the card and/or key access rights of individuals
that change roles within The City Of El Paso or are separated
from their relationship with The City Of El Paso
- Visitors will be escorted in card access controlled areas
of Information Technology facilities.
- The person responsible for the Information Technology facility
will review access records and visitor logs for the facility
on a periodic basis and investigate any unusual access.·
The person responsible for the Information Technology facility
will review card and/or key access rights for the facility
on a periodic basis and remove access for individuals that
no longer require access.
- Signage for restricted access rooms and locations will be
practical, yet minimal discernible evidence of the importance
of the location should be displayed.
|
| Disciplinary Actions |
Violation of this policy may result in disciplinary action,
which may include termination for employees and temporaries; a
termination of employment relations in the case of contractors
or consultants; dismissal for interns and volunteers; or suspension
or expulsion in the case of a student. Additionally, individuals
are subject to loss of The City Of El Paso Information Resources
access privileges, civil, and criminal prosecution. |
|
 |
print-version