+INF.6 Storage Media Archives
---+INF.6.G1. Excessive Temperature and Humidity
---+INF.6.G2. Insufficient Rules
---+INF.6.G3. Unauthorised Entry to Sensitive Rooms
---+INF.6.G4. Theft
---+INF.6.A1 Hand-Held Fire Extinguishers [Fire Safety Officer] (B)
---+INF.6.A2 Site Access Regulations and Control [Building Services] (B)
---+INF.6.A3 Protection Against Dust and Other Contamination (B)
---+INF.6.A4 Closed Windows and Locked Doors [Employee] (B)
---+INF.6.A5 Using Protective Cabinets [Employee] (S)
---+INF.6.A6 Avoidance of Water Pipes [Building Services] (S)
---+INF.6.A7 Compliance with Climatic Requirements [Building Services] (S)
---+INF.6.A8 Secure Doors and Windows [Planner] (S)
---+INF.6.A9 Alarm System [Building Services] (H)

INF.6 Storage Media Archives

Introduction

Storage media archives are closed rooms within an organisation that are used to store of all kinds of storage media. In addition to storage media used for digital information, this includes paper documents, film, and other media.

Objective

This module describes the typical threats and requirements regarding the information security of a storage media archive. The aim is to protect the information stored there and on other types of media.

Scoping and Modelling

Module INF.6 Storage Media Archives must be applied to all rooms that are used as archives for storage media.

This module deals with technical and non-technical security requirements for storage media archives. It does not cover recommendations related to proper archiving. These are included in module OPS.1.2.2 Archiving.

Within the IT-Grundschutz framework, no increased requirements are placed on archive rooms with regard to fire protection. However, additional fire protection requirements can be met by the containers in which storage media are stored.

Useful Resources

The German Institute for Standardisation (DIN) provides specifications for physical security in buildings and rooms in the standard DIN EN 1627:2011-09.

1. Übersicht

Bezeichnung Standard
INF.6.A1 Hand-Held Fire Extinguishers [Fire Safety Officer] (B)

In case of fire, suitable hand-held fire extinguishers MUST be easily accessible in a storage media archive. These hand-held fire extinguishers MUST be inspected and serviced regularly. Employees working near a storage media archive MUST be instructed in the use of hand-held fire extinguishers.

INF.6.A2 Site Access Regulations and Control [Building Services] (B)

A storage media archive MUST ONLY be accessible to authorised persons. Site access MUST be reduced to a minimum number of employees. Therefore, site access MUST be regulated and controlled. A concept MUST be developed for site access control. The effectiveness of the site access control safeguards it contains SHOULD be regularly reviewed. To prevent site access control from being bypassed or at least make this more difficult, the entire room MUST have mechanical resistance safeguards that satisfy the protection needs at hand; under no circumstances should they correspond to less than RC2 (in accordance with DIN EN 1627).

INF.6.A3 Protection Against Dust and Other Contamination (B)

It MUST be ensured that the media in a storage media archive are adequately protected against dust and dirt. The requirements for this MUST be analysed in the planning phase. A strict smoking ban MUST be observed in storage media archives.

INF.6.A4 Closed Windows and Locked Doors [Employee] (B)

A storage media archive SHOULD NOT have windows if they can be avoided. If there are windows, they MUST be closed when leaving the storage media archive. The door MUST also be locked when leaving the room. Fire and smoke doors MUST be closed.

INF.6.A5 Using Protective Cabinets [Employee] (S)

The storage media and other media in storage media archives SHOULD be stored in suitable protective cabinets.

INF.6.A6 Avoidance of Water Pipes [Building Services] (S)

In storage media archives, unnecessary water-bearing pipes SHOULD generally be avoided. If water pipes are nevertheless laid through a storage media archive, they SHOULD be checked regularly to ensure that they are still watertight. In addition, precautions SHOULD be taken so that any water leaks will be detected at an early stage. For a storage media archive with high availability requirements, there SHOULD be response plans that specify exactly who is to be informed in case of a leak and how to proceed in general.

INF.6.A7 Compliance with Climatic Requirements [Building Services] (S)

It SHOULD be ensured that the maximum and minimum values permitted for temperature and humidity, as well as the dust content of the air in the room, are observed in a storage media archive. The air temperature and humidity values SHOULD be recorded and documented several times a year for a period of one week. Any detected deviations from the target value SHOULD be corrected promptly. The air conditioning system used SHOULD be serviced regularly.

INF.6.A8 Secure Doors and Windows [Planner] (S)

Security safeguards such as windows, doors, and walls SHOULD be appropriate and up to the task of dealing with burglary, fire, and smoke. Depending on the protection needs at hand, a suitable resistance class SHOULD be implemented in accordance with DIN EN 1627. All security doors and windows SHOULD be checked regularly to ensure that they are still functioning properly. The entire storage media archive in question SHOULD have mechanical resistance safeguards that meet the relevant protection needs and correspond to RC3 (according to DIN EN 1627) at minimum.

INF.6.A9 Alarm System [Building Services] (H)

An appropriate alarm system SHOULD be set up in storage media archives. This alarm system SHOULD be inspected and serviced regularly. It SHOULD be ensured that the recipients of alarm messages are able to react appropriately to them.

1.1 Referenzen

1.2 Identifizierte Anforderungen

1.3 Zugehörige Regulierungen

2. Identifizierte Anforderungen

Anforderungen
Quelle Anforderung

3. Zugehörige Regulierungen

Regulierungen
Quelle Regulierung

Verknüpfte Vorgänge