| Date: | 01/01/2025 |
|---|---|
| Organization: | Cybersecurity and Enterprise Risk Management |
| Referenced Sources: | MGL Chapter 7D, Section 2 |
The Physical and Environmental Security Standard reinforces the Commonwealth’s commitment to a physical and environmental strategy and outlines the controls necessary to safeguard the Commonwealth’s information assets and reduce risks.
This standard establishes requirements to prevent damage or physical access to the Commonwealth’ s information processing facilities and sensitive data. This standard defines the following controls and acceptable practices:
•Definition of physical security perimeters and required controls
•Personnel and visitor access controls
•Requirements for environmental protection equipment
•Protection of equipment stored off-site from the Commonwealth’s facilities