Physical Access Policy

Physical security of computer equipment shall conform to recognized loss prevention guidelines.

Personnel and authorized third parties shall ensure that SCI, PII, PI, and customer data are only recreated in hardcopy format where absolutely needed for an identified purpose and are appropriately secured.

All Personnel and authorized third parties shall follow clean desk/clean screen best practices, especially when stepping away from workspaces.

Facility entry controls shall be used to limit and monitor physical access to systems where PII, SCI and Subscriber Data are maintained, including but not limited to buildings, loading docks, holding areas, telecommunication areas, and cabling areas or media containing PII, SCI or Subscriber Data using appropriate security controls including, but not limited to:

1. Use of video cameras or other access control mechanisms to monitor individual physical access to sensitive areas.

2. Store video for at least ninety (90) days, unless otherwise required by law.

3. Restriction of unauthorized access to network access points.

4. Restriction of physical access to wireless access points, gateways, and handheld devices.

5. Use of defined security perimeters, appropriate security barriers, entry controls and authentication controls, as appropriate.

6. Ensuring that all personnel with physical data center access to data centers containing PII, SCI or Subscriber Data wear visible identification that identifies them as employees, contractors, visitors, etc.

7. Restriction of non-personnel or Need to Know Parties (NKP) from being given virtual access to the Data Center without appropriate approvals in place.

8. Ensure that any physical access required by NKPs are supervised.

9. All visitors shall log in and receive the appropriate access card, as necessary, and identifying badge.

10. Any paper and electronic media that contain Subscriber Data, PII, SCI or Personal Data shall be physically secured.

11. Doors to physically secured facilities shall always be kept locked.