Project Details

BACKGROUND

An organization within Manufacturing (consumer market) industry needed an overview of their physical security on multiple sites as they needed to incorporate new European data centres and computer environments in to operational mode that where to be migrated into a central Nordic Data Centre. Activities included were review of existing security procedures, performing a system security base line and, creating client risk threat identification, assessment and evaluation report. 

To understand the current maturity of data centres information security posture and evaluate any risks, the following activities was set to be performed;

    – Penetration tests of the technical security functions

   – Test of the intrusion detection capabilities of network 

   – Assess configuration of hardware, firewalls, network and network components

   – Test monitoring and alert services inside the data centre

   – Assessment of disposal and removable media management

   – Human physical access policies

   – Assessment of privileged users activites on system, firewalls and network

   – Assessment of data racks security  

   –Test physical parameeter security  

   - Review physicall access logs

   - Test of physicall access breach (piggy-backing)

CHALLENGE

Organization needed an overview of their existing physical security across a new entity just acquired by the organization. The new entity existed in 14 location spread over 3 countries and served as a 'Hub' and their regional manufacturing factories.

To provide the organization with an updated status, onsite inspectiosn was done to form an analysis of urgent needs and priorities to ensure the organizations assets. Main challenges was:

• Understand the culture maturity for information and cybersecurity
• and protection of production data centres and intellectual capital
• Evaluate controls and awareness of enherited staff and sub-contractors 
• Document the physical, personnel and technical security functions in use; 
• Access control process, Physical security monitoring, removable media process, remote access policies, access privileges and aser education and awareness

Assessment report was needed to decide future strategy and migration of the new entitity into to the organizations global information security managemnet system.

  Assessment & Review of

  Physical Security & Access