Policy 7230A - Department of Administration

efore physical access is granted. Once access has been granted, those visitors must
be escorted at all times and their activities monitored at all times.
Visitor access shall be recorded in a log that includes, at a minimum:
• Name and organization of the visitor.
• Name and organization of the person and/or system visited.
• Purpose of the visits.
• Date and time of arrival and departure.
• The form of identification used for identity verification.
• Visitors signature
These access records will be reviewed on an at least monthly basis.
10.2 Physical Environment Control
The State of Kansas requires the use of physical environmental controls to ensure
appropriate provisions are made to minimize environmental hazard exposure and to
maximize operational availability of information systems.
Physical environmental controls clearly indicate the appropriate environmental
operating parameters under which State information systems should be operated.
Without physical environmental controls the potential exists that the operating
environment will be unsuitable to the reliable operations of State information systems
leading to information system unavailability and information corruption.
Information systems will be supported by UPS power. At a minimum, sufficient UPS
capacity will be provisioned to allow for an orderly shutdown of all information
systems. Additionally, power equipment and power cabling shall be deployed and
positioned in such a way as to minimize the likelihood of damage. Finally remote
power shut-off capabilities will be provided for all information system components
within information system facilities. This will allow information system components to
be immediately powered down from within the information facility without direct
component access. In the event of a power outage, emergency lighting that covers
emergency exists and facility evacuation routes will be provided.
Core components of information systems are protected from inadvertent water
damage by not being deployed within facilities such that they are not placed directly
below any water conduits. This restriction will only apply to core components of
information systems implemented after the publishing of this policy. Core components
of information systems deployed prior to the release of this document are considered
exempt from this requirement. Further a fully operable main water supply shut off
valve must exist for each facility whose location must be known.
Information systems are protected from fire damage by fire detection and suppression
systems. Detection systems must operate automatically and notify appropriate State
personnel as well as emergency responders. Suppression systems may operate
manually in facilities that are staffed on a regular basis but must operate automatically
in facilities that are not staffed on a regular basis. Suppression systems that activate
32