policies/ppmHomeSearch
policies/ppm

Physical and Environmental Security Policy

Chapter 3438

Issued April 15, 2009

Table of Contents

.010 Purpose

.020 Scope

.030 Effective Date

.040 Policy

.050 Definitions

.060 Roles and Responsibilities

.070 Implementing Procedures

.080 Related Laws, Regulations, or Policies

.100 Questions/Waivers


.010 Purpose

This policy defines the requirements for protecting university information and technology resources from physical and environmental threats in order to reduce the risk of loss, theft, damage, or unauthorized access to those resources, or interference with K-State operations.

.020 Scope

This policy applies to all university colleges, departments, administrative units, and affiliated organizations that use university information technology resources to create, access, store or manage University Data to perform their business functions.

.030 Effective Date

This policy became effective on March 31, 2009.

.040 Policy

All University information and technology resources should have appropriate physical and environmental security controls applied commensurate with identified risks.

.050 Definitions

  1. Core network facilities - the cabling, equipment, and network/telecommunications rooms associated with the high speed backbone of K-State’s campus network that carries aggregated network traffic for all the buildings and external network connections (e.g., the KanREN, Internet, and Internet2 connections). As of February 2009, the five core network rooms are located in the Power Plant, Hale, West, and Coles on the Manhattan campus and the Technology Center (room 191) on the Salina campus.

  2. Mobile storage devices - Any easily movable device that stores University Data, including but not limited to laptop computers, Personal Digital Assistants (PDAs), Smartphone’s, external hard drives, and USB flash drives.

  3. Uninterruptable Power Supply (UPS) – A device designed to provide power, without delay, during any period when the normal power supply is incapable of performing acceptably.

  4. University Data – Any data related to Kansas State University ("University") functions that are a) stored on University information technology systems, b) maintained by K-State faculty staff, or students, or c) related to institutional processes on or off campus. This applies to any format or media (in other words, it is not limited to electronic data).

.060 Roles and Responsibilities

Responsibility for physical and environmental security of K-State information and technology resources is shared by the individuals using these systems, units that own them, and system administrators responsible for managing the systems.

.070 Implementing Procedures

  1. Physical Security

  2. Environmental Security

.080 Related Laws, Regulations, or Policies

  1. Kansas State University Data Classification and Security Policy

  2. K-State Network/Telecommunications Space Accommodations Policy specifies physical security for network and telecommunications facilities http://www.k-state.edu/its/itpolicies/accommodation.pdf

  3. State of Kansas Information Technology Policy 7230 – General Information Technology Enterprise Security Policy http://www.da.ks.gov/itec/Documents/itecitpolicy7230.htm

  4. State of Kansas Default Information Technology Security Requirements http://www.da.ks.gov/itec/Documents/ITECITPolicy7230A.pdf, March 2006

  5. ISO/IEC 27002:2005, "Information technology – Security techniques – Code of practice for information security management" http://www.iso.org/iso/catalogue_detail?csnumber=50297, published by the International Standards Organization. This is an international security standard that specifies physical and environmental security controls to protect assets from loss, theft, damage, and unauthorized access.

.100 Questions/Waivers

The Vice Provost for Information Technology Services (VPITS) is responsible for this policy. The VPITS or designee must approve any exception to this policy or related procedures.

Questions should be directed to the Chief Information Security Officer.

start of standard bottom bar
Home        Search        Directories        Calendar        Comments
Kansas State University
April 15, 2009