cissp2014年中文培训课件国内知名机构物理和环境安全

PhysicalandEnvironmental 1Physicalsecurityreferstotheprovisionofasafeenvironmentforinformationprocessingactivitiesandtotheuseoftheenvironmenttocontrolthebehaviorof 取决于组织可接受的风险水平确定什么人和什么事能对其造成损害 监测机制 Facilityrequirements设施需求—SuchassiteselectionandconstructionandperimetercontrolTechnicalcontrols技术控制—SuchascardortokenEnvironmental/lifeandsafety环境与生命安全—SuchaspowerandfirePhysicalsecuritythreats物理安 —SuchasweatherandotherElementsofphysicalsecurity物理安全要素—Suchassensorsand Support Physical sand Fiveinterruptionsincomputingservicesphysicaldamageunauthorizeddisclosureofinformation lossofcontrolofsystemintegrityphysicaltheft

PhysicalSecurityAdministrativecontrolsTechnicalcontrolsPhysicalcontrols–锁 2设施需求规划Facility 设施安全管理FacilitySecurity管理人员控制 nel 2.1Visibility 周围与外界条件Surrounding率 性 WallsWallswillhaveacceptablefirerating.ClosetsmusthaveHIGHfirerating防火和阻燃级别（特殊安全区域的加强）CeilingsConcernhereisweightbearingratingandthefirerating防FloorsPhysicalweight,non-conductingsurface承重，绝缘，防火、阻Windows窗户-Mustbeshatterproof防碎、半透明（贴膜）或单向、抵 Doors门-Mustresistforcibleentryandhaveequalfireratingofdoors.ElectricdoorlocksMUSTdisableinstateofemergency逃生通道的电子门在断电的 况下应该是关闭的fail-secure，抵抗性，单向开关SprinklersystemLocationmustbeknown类型选择（干Liquidorgaslines排水/ISstaffmustknowlocationofshutoffvalves.Waterdrainsshouldbepositive（流出建筑的方向） AC通风-ACunitsshouldhavededicatedpowercircuits.Shouldhaveoutwardpositiveairpressureandhaveprotectedintakevents ElectricalRequirements电力供应-Facilityshouldhaveestablishedbackupsources.（备份、稳定、

——————— 机房组成- 火、防潮” 1.用螺栓将支柱的底脚与土建地面固定牢，并通过2用固定粘合材料将支柱的底脚与土建地面固定 •Audittrails-Includedateandtimeofaccess-Whetheritwasasuccessor-wheretheaccesswas-whoattemptedthe-whomodifiedtheaccess EmergencyProcedures Pre-employmentscreening ElectricalPowerFireDetectionandsuppressionHVACCCTVAccess ElectrialPowerGround接地Thepathwaytotheearthtoenableexcessivevoltagetodissipate.导走过量的电压NOISE噪音–Referstothepresenceofelectricalradiationinthesystemthatinterfereswiththetransmissionofcleanpower.Thereareseveraltypesofnoise,mostcommonbeingEMIandRFI ElectrialPower powerlineconditioning PropergroundingCableshieldinglimitexposuretoelectricshitandmagnets远离电磁 e尖峰momentaryhighSurge浪涌prolongedhighSag衰变momentarylowBurnout电压过低-prolongedlowvoltageFault故障-amomentarypoweroutageBlackoutaprolongedpoweroutage UPS不间断电源：包括online和稳流和整流的作用powerlineconditioners稳压器/调节器（浪涌电压保护器backupsources （ Fire–OxygenTemperature ISO

ClassificationofClassificationoffires(ISO3941:2007 Smoke-ActuatedUsedprimarilyinventilationsystemswhereanwarningdevicewouldbeusefulPhotoelectricdevicesare Heatsensing热感-Activateswhentempreachesapredeterminedlevel.Lowrateoffalsepositives Flame-actuated火焰触发-Expensive,veryfastresponsetime.Usedforspecializedapplicationsandprotectionofvaluableequipment AutomaticDialupFireAlarms自动拨号 装置-signalresponsesystemthatdialsfireor andusesprerecorded

OnCeilings-AboveSuspendedCeilings-BeneathRaisedFloors-ReturnAirDucts- Visual&Audible Local&Remote Water水-suppressesthetemperaturerequiredtosustainfire SodaAcid酸碱灭火剂( )-Suppressesthefuelsupplyoffire C02二氧化碳-SuppressestheO2 Halon哈龙(卤代烷,气体)-suppressescombustionthroughachemicalreactionthatkills通过化学反应 CarbonDioxidePotentiallyLethalRemovesOxygen BestProtectionforInsideEquipmentSpecialAboveSuspendedUnderRaisedConcentrations<10%areesDepletesOzoneMontrealProtocol

TypeofElementofSuppressionAWoodAndWaterorsoda水BAndcoolantsGas(Halon),CO2,orsodaacidCAndwireGas(Halon),orD HowSuppressionsodaRemoveRemoveGas–HalonorHalonInterfacewiththechemicalreactionsbetweenelements AtExitsMarkLocationsandTypeTypesAB&C WetPipe:alwayscontainwaterinthepipesandareusuallydischargedbytemperaturecontrol缺点是：冻，漏DryPre-action: mendedfor OtherTraining（误按LocalFireCodesNoSmoking

1

1 1 3.3Thefocalpointforenvironmentalcontrols.AnITmanagerneedstoknowwhoisresponsibleforHVAC,andclearescalationstepsneedtobedefinedwellinadvanceofanenvironmentaldisaster.名IT经理需要知道谁负责HVAC，并且在环境发生前，应定义好清晰的升级步骤 Humidity-Idealoperatinghumidityisbetween40and60Highhumiditycausescondensation.Lowhumiditycauses 静电Useanti-staticsprayswhenpossible,useantistaticflooring,useantistatictablesandfloormats TemperaturesWhenDamagePaper

350oF/175oF/79.4150oF/100oF/ CCTV— evisiontransmissionsystemthatusescamerastotransmit闭路电视系统(CCTV)是对人们无法或不可能直接、即时观察的场所，提供一种实时、形象、反映被对象的画面，作为即时处理或事后分析的一种。 矩阵切换器 控制台 SecurityAccesscards-2types.Smartand WirelessProximityReaders无线非接触 -Doesnotrequiretheusertophysicallyinsertcard.Transmitsasequenceofkeystrokes.–无需接触，利用电磁波传输预置的System-sensingproximityPassive—senseselectromagneticfieldof Field-powered—containsactiveelectronics,RFtransmitterandpower Transponder—readerinterrogatescardwhichtransmitsanaccess.Thecardandreaderhavearec ransmitterandba无线发射式 –AccessControlPiggybacking-Whenanindividualgainsunauthorizedaccessbyusingsomeoneelse‘slegitimatecredentialsoraccessrights.尾随进入–当一个人通过其他的人和合法凭证或 PerimeterIntrusion Photoelectricsensors 光电感应式-receivesabeamoflightfromalightemittingdevice.Alarmisactivatedwhentripped. Audio 声波探测-passive MotionDetectorsWavePatterns波形探测-generateafrequencywavepatternandalarmifpatternisdisturbed产生一个频率波型，如果波型被扰乱即—保Capacitance电容探测-Monitoranelectricalfieldsurroundingtheobject.Usedforspotprotectionwithinafewinches监视目标周围的电场—保护Shouldbeinstalledondoors,windows,ceilings,walls,roofs,ventilationopeningsetc应安装在门，窗口，天花板，墙，屋顶，通风口等处 Local-RingsCentralstationsystems 台系统-monitoredaroundtheclockonleasedlines.CangiveCCTVdis yandprintreports.在租用 ProprietarySystems私有系统-SimilartocentralstationsexceptthemonitoringsystemisOWNEDANDOPERATEDbythecustomer. AuxiliaryStation辅助台-Alarmsthatringlocalfire/ .Manycentralstationsystemsincludethisfeature. sAlarmsystemsrequireseparatecircuitryandbackuppower. DatathatisnolongerneededorusedmustbeObjectreuse-Theconceptofreusingdatastoragemediaafteritsinitialuse客休重用–数 DataRemanence:residualinforemainingonmediaaftererasure,whichmayberestored—OrangeBookrequiresmagneticmediabeformattedseventimesdegaussingbeforediscardorreuse Deletingdoesnotactuallyremovedata,fileallocationtableDamagedsectorsmaynotbeoverwrittenbyformatutility—Need 和备份数据删除步骤 Clearing删除overwritingdataonmediaforreusewithinsamesecuredenvironment(i.e.notusedinalessersecurityenvironment) :degaussingoroverwritingmediatoberemovedfrommonitoredenvironment,suchasresale,useinunsecuredenvironment,ordonation Destruction破坏:comple ydestroyingmedia—Goodpracticetopurgemediabeforesubmittingfordestruction 4 4.1 Dogs警犬expensiveloyalkeensenseof LightingOneofthemostcommonformsCriticalprotectedbuildingsshouldbeilluminatedupto8feethighwith2footcandlepower 4.1FencingPrimarilyameansofperimeter/boundaryfacilityaccessc