Advisory Physical and Environmental Security Standard

Date:	10/05/2018
Organization:	Cybersecurity and Enterprise Risk Management
Referenced Sources:	MGL Chapter 7D, Section 2

The Physical and Environmental Security Standard establishes requirements to ensure that the Commonwealth’s information assets are protected by physical and environmental controls that prevent tampering, damage, theft or unauthorized physical access.

Purpose

The Physical and Environmental Security Standard establishes requirements to ensure that the Commonwealth’s information assets are protected by physical and environmental controls that prevent tampering, damage, theft or unauthorized physical access. This standard defines the following controls and acceptable practices:

• Definition of physical security perimeters and required controls
• Personnel and visitor access controls
• Requirements for environmental protection equipment
• Protection of equipment stored off-site from the Commonwealth’s facilities