• Answer: Physical security is designed and implemented in several layers. Each community of interest in the organization is responsible for components within these layers.
• General management: Responsible for the security of the facility in which the organization is housed and the policies and standards for secure operation. This includes exterior security, building access, as well as other controls.
• IT management and professionals: Responsible for environmental and access security in technology equipment locations and for the policies and standards of secure equipment operation. This includes access to server rooms, server room temperature and humidity controls.