1. Lock up the server room

Even before we lock the servers, before we even turn them on for the first time, we should ensure that there are good locks on the server room door. The server room is the heart of our physical network, and someone with physical access to the servers, switches, routers, cables and other devices in that room can do enormous damage.

2. Set up surveillance

Locking the door to the server room is a good first step, but someone could break in, or someone who has authorized access could misuse that authority. We need a way to know who goes in and out and when. A log book for signing in and out is the most elemental way to accomplish this, but it has a lot of drawbacks. A person with harmful intent is likely to just …show more content…
Don't forget the workstations

Hackers can use any unsecured computer that's connected to the network to access or delete information that's important to our business. Workstations at unoccupied desks or in empty offices (such as those used by employees who are on vacation or have left the company and not yet been replaced) or at locations easily accessible to outsiders, such as the front receptionist's desk, are particularly vulnerable.

Disconnect and/or remove computers that aren't being used and/or lock the doors of empty offices, including those that are temporarily empty while an employee is at lunch or out sick. Equip computers that must remain in open areas, sometimes out of view of employees, with smart card or biometric readers so that it's more difficult for unauthorized persons to log on.

6. Keep intruders from opening the case

Both servers and workstations should be protected from thieves who can open the case and grab the hard drive. It's much easier to make off with a hard disk in our pocket than to carry a full tower off the premises. Many computers come with case locks to prevent opening the case without a …show more content…
For portables that contain sensitive information, full disk encryption, biometric readers, and software that "phones home" if the stolen laptop connects to the Internet can supplement physical precautions.

8. Pack up the backups

Backing up important data is an essential element in disaster recovery, but don't forget that the information on those backup tapes, disks, or discs can be stolen and used by someone outside the company. Many IT administrators keep the backups next to the server in the server room. They should be locked in a drawer or safe at the very least. A set of backups should be kept off site, and we must take care to ensure that they are secured in that offsite location.

Some workers may back up their work on floppy disks, USB keys, or external hard disks. If this practice is allowed or encouraged, there should be policies requiring that the backups be locked up at all times.

9. Disable the