YALE-MSS-4.1: Physically secure the IT System

Standards Group:
YALE-MSS-4: Physical Security

YALE-MSS-4.1: Physically secure the IT System

Low Risk Endpoint Not Required Moderate Risk Endpoint Not Required High Risk Endpoint Required Low Risk Server Not Required Moderate Risk Server Not Required High Risk Server Required Low Risk Mobile Device Not Required Moderate Risk Mobile Device Not Required High Risk Mobile Device Not Required Low Risk Network Printer Not Required Moderate Risk Network Printer Not Required High Risk Network Printer Required

Details

Systems must be physically secure.

Physical security includes, but is not limited to:

  • Limit access to the secured area to only those who need it
  • Review and re-certify access to the secure area annually
  • Access to the secure space must produce a physical or electronic audit log

If the IT system is hosted in a Yale Critical IT Space, this requirement is met. For additional information, please see Minimum Physical Security Standards for Critical IT Spaces.

Controls