IT Baseline Protection Manual - The Information Warfare Site

Safeguard Catalogue Infrastucture Remarks
____________________________________________________________________ .........................................
S 1.46 Use of anti-theft devices
Initiation responsibility: Head of IT Section, IT Security Management
Implementation responsibility: Head of IT Section
Anti-theft devices should be used wherever valuable items need to be
protected or where other safeguards, such as appropriate control of access to
the workstations, cannot be implemented. Anti-theft devices are useful in
places to which the public have access or where the fluctuation of users is
extremely high.
Not only the object to be protected, but also the monitor, keyboard and other
accessories should be fitted with anti-theft devices.
There are now various types of anti-theft devices available on the market. On
the one hand, there are anti-theft devices for hardware which protect IT
equipment, for example by connecting the IT system to the desk. There are
also a number of security mechanisms to prevent thieves from opening the
casing and stealing components or manipulating security-related settings, for
example by removing security cards.
When new IT equipment is procured, it should be ensured that it has eyes on
the casing, so that it can be attached to other objects, and that the casing can
be locked.
Additional Controls:
- Have IT systems or IT components been stolen within the last year?
- How are IT systems or IT components protected against theft?
____________________________________________________________________ .........................................
IT-Baseline Protection Manual: Oktober 2000