Policy 7230A - Department of Administration

10.1.1.c Access Logs
• For all individuals that access facilities, the following
information should be captured and (where applicable)
verified:
o Date and time of entry.
o Name of accessing individual and authentication
mechanism.
o Name and title of authorizing individual.
o Reason for access.
o Date and time of departure.
10.1.1.d Delivery and Removal Orders and Logs
• For all deliveries and removal of systems or system
components, the following information should be captured
(and where applicable) verified:
o Date and time of delivery/removal.
o Name and type of equipment to be delivered or
removed.
o Name and employer of the individual performing the
delivery/removal and the authentication mechanism
used.
o Name and title of authorizing individual.
o Reason for delivery/removal.
10.2. Physical Environmental Control
The following are the Non-Mandatory Baselines that support the Physical
Environmental Control section of the Default Security Requirements:
10.2.1. Provide Environmental Controls
Appropriate environmental controls are necessary to ensure the availability of
systems:
10.2.1.a Temperature and Humidity Specifications
• The temperature of those areas within a facility that house
systems or system components should be maintained
between 68 and 77 degrees Fahrenheit (20 and 25 degrees
Celsius).
• The humidity of those areas within a facility that house
systems or system components should be maintained
between 40 and 55 percent relative humidity.
30