IT Baseline Protection Manual - The Information Warfare Site

Safeguard Catalogue - Organisation Remarks
____________________________________________________________________ .........................................
- whether the items require a particular form of transport (e.g. fragile
objects, special transport for computers etc.),
- where they are to be taken to,
- the names of the authorised recipients,
- the names of the persons who collected and delivered the items
(together with the date and time).
- The shipment itself must be marked in such a way that it can be uniquely
identified and the transport route is also clear. However, labelling should
not include any information regarding the sensitivity of the content. The
labelling scheme should be designed so that it is not easy to copy. To
achieve this, those planning the removal could provide special labels.
- Again, comings and goings during a move should be subject to controls.
The authorised removal companies should provide advance information
regarding the identity of the staff they plan to use. Where staff are changed
suddenly due to holidays, sickness etc., the names of stand-in staff should
be notified promptly. Depending on the particular location and
circumstances, the doormen or other company employees can then check
the names of those seeking access against a list of names of those involved
in the removal either sporadically or continuously. Any external
contractors involved in the removal should be provided with identity passes
which show clearly who has rights of access.
- Shipments, especially data media, must be held securely both before and
after the move. Any rooms in which removal activities are not taking place
but which are not supervised by staff, for example, rooms which have not
yet been cleared or have already been cleared, should be locked.
Once the move has taken place, controlled operations should be resumed as
quickly as possible. Priority should be given to the infrastructural and
organisational security of the new offices, for example,
- full access control measures should be resumed;
- fire loads should be removed from corridors, i.e. removal crates should be
taken to the new working areas;
- shipments should be checked on delivery to ensure that they are complete,
in working order and have not been manipulated.
Particular care should be taken when planning the relocation of any servers
and network switching elements, as failure of one component alone could be
sufficient to put the entire network out of action.
Prior to a move, the central IT administration should therefore take a number
of precautions to ensure that everything goes smoothly:
- Before the relocation phase gets under way, a plan covering any necessary
changes in user connections should be prepared in good time. In particular,
an analysis should be performed as to whether any new equipment is
necessary to ensure the smooth changeover of the computer connections of
staff. For security reasons it is also important to know what changes will
occur in the communication behaviour of the IT systems as a result of the
____________________________________________________________________ .........................................
IT-Baseline Protection Manual: Oktober 2000