Network security comes in many forms and most people think of network security as firewalls, routers, and anti-virus for computers. Where those are all crucial parts of network security there is a part of network security that a lot of people don`t think about, “Physical Security”. Physical security is the physical act of stopping an unauthorized user from using a computer. It doesn`t matter how up to date your virus scanner is, or how well your firewall works, if someone physically accesses your KVM for your servers then they have full access to everything. Here are five tips that can help you better secure your network.
1. Keep servers and switches separate from public areas
Servers should never be kept in an area where people walk through all day. Servers are the heart of your network and should be secured in a locked room with tight control over the keys. I personally use an electronic key card system that only a hand full of people have access to. The electronic key card system also keeps a log of who`s key accessed that door at any given time. Switches should also be included in this because if someone has access to a switch and can reset it to defaults it doesn`t matter how well you have it locked down.
2. Install surveillance cameras
Many people feel that surveillance cameras are an invasion of privacy but as a business owner they can be your best friend. A surveillance camera in the server room is a must, especially if you process or store any kind of credit card information. Make sure that your cameras are recording to an area separate from the area it is monitoring so video can not be stolen. I have two cameras in my server room, one on the door and another on the servers. The camera along with the log from the electronic key card is a great way to know everyone that goes in and out of the server room.
3. Keep computers locked
Depending on the type of business you do, you are going to have computers for work that are located in public places. These computers should always be manned by a staff member who will not allow someone who it not an employee to use the computer. If the staff member should leave their computer, it should always be locked to prevent unauthorized use. Locking a computer is very simple, you simply press CTRL+ALT+DEL and then click “Lock Computer” button that appears, or simply log out when you step away from your computer.
4. Do Not Share Passwords or Logins
I think this one is important enough to go into both categories of physical network security and logical network security. Sharing passwords and login not only puts your network at risk of unauthorized access but it compromises your logs as well. If five people use the same login and critical data gets stolen, erased, or even corrupted under that login you can`t pinpoint who is responsible. Give everyone their own login and password and make it very clear that what happens under their login is their responsibility.
5. Include physical security in to an acceptable use policy
An acceptable use policy should not only include things that a employee cannot do but it should also include reporting measures. Security is everyone`s responsibility and your acceptable use policy should include the requirement to report unauthorized use of the network. This can even be setup as anonymous so an employee doesn`t feel like they are snitching on a fellow employee.
As I stated above security is everyone`s responsibility it is not just a IT to keep the network secure, it is a whole company thing. Network security should be headed by upper management with most of the input coming from IT on what is best. By following these 5 simple tips you can make your network that much more secure against unauthorized use of your network resources.