IT Baseline Protection Manual - The Information Warfare Site

Safeguard Catalogue - Organisation Remarks
____________________________________________________________________ .........................................
Standard Form 24990, which briefly outlines the safety characteristics of
protective cabinets.
In choosing protective cabinets, the permissible floor load at the place of
installation must also be taken into account.
After these selection criteria for the protection value of the cabinet, the next
item to be determined is the equipment for the cabinet in line with known
requirements. With this in mind, and before purchasing a protective cabinet, it
should be stipulated which equipment and which types of data media are to be
kept in it. The internal fittings of the protective cabinet must be selected in
line with what is decided. Generally speaking, retrofitting is difficult, as the
protection value of the cabinet and its specific certification can be adversely
affected. Room for future expansion should also be allowed for in planning.
In server cabinets, as well as for the server and a keyboard, space should also
be provided for a monitor and additional peripheral equipment, such as, for
example, tape drives, so that administrative work can be carried out on the
spot. Here, attention should be paid to choosing equipment which is
ergonomically suitable, so that administrative work can be carried out on the
server unhindered. Thus, for example, a pull-out base is desirable for the
keyboard, fitted at a height which enables the administrator to perform his
work while seated. Depending on the use to which the cabinet is being put, air
conditioning and/or an uninterruptible power supply (UPS) may be required.
The appropriate equipment must then be placed in the cabinet. Otherwise there
must at least be some form of ventilation. It is recommendable to equip the
cabinet with a locally operating fire early warning system which interrupts the
power supply to the equipment in the event of fire (on the input and the output
side of the UPS, provided there is one).
Back-up data media and log printers should not be housed in the same cabinet.
In the event of damage to the server, back-up data media would presumably
also be damaged. Logging of the actions on the server also acts as a check on
the administrator. It is therefore not sensible to grant him access to the log
print-outs even where he is the sole recipient.
Additional controls:
- Which protective functions is the cabinet meant to fulfil?
- Are these fulfilled by the cabinet chosen?
- With which of the above-mentioned quality categories does the
protective cabinet comply?
- Is the console of the server only accessible to the administrator?
- Are the dimensions of the protective cabinet adequate?
- Were unauthorised changes carried out on the protective cabinet?
____________________________________________________________________ .........................................
IT-Baseline Protection Manual: Oktober 2000