+Physical Security (PS)
---+Physical Security and Environmental Control Requirements
---+Redundancy model
---+Perimeter Protection
---+Physical site access control
---+Protection from fire and smoke
---+Protection against interruptions caused by power failures and other such risks
---+Surveillance of operational and environmental parameters

Physical Security (PS)

None

1. Prezentare generală

Physical Security and Environmental Control Requirements Security requirements for premises and buildings related to the cloud service provided, are based on the security objectives of the information security policy, identified protection requirements for the cloud service and the assessment of risks to physical and environmental security. The security requirements are documented, communicated and provided in a policy or concept according to SP-01.
The security requirements for data centres are based on criteria which comply with established rules of technology. They are suitable for addressing the following risks in accordance with the applicable legal and contractual requirements:
• Faults in planning;
• Unauthorised access;
• Insufficient surveillance;
• Insufficient air-conditioning;
• Fire and smoke;
• Water;
• Power failure; and
• Air ventilation and filtration.
If the Cloud Service Provider uses premises or buildings operated by third parties to provide the Cloud Service, the document describes which security requirements the Cloud Service Provider places on these third parties.
The appropriate and effective verification of implementation is carried out in accordance with the criteria for controlling and monitoring subcontractors (cf. SSO01, SSO02).
Additonal CriteriaThe security requirements include time constraints for self-sufficient operation in the event of exceptional events (e.g. prolonged power outage, heat waves, low water in cold river water supply) and maximum tolerable utility downtime.
The time limits for self-sufficient operation provide for at least 48 hours in the event of a failure of the external power supply.
For a selfsufficient operation during a heat period, the highest outside temperatures measured to date within a radius of at least 50 km around the locations of the premises and buildings have been determined with a safety margin of 3 K. The security requirements stipulate that the permissible operating and environmental parameters of the cooling supply must also be observed on at least five consecutive days with these outside temperatures including the safety margin (cf. PS06 Protection against failure of the supply facilities).
If water is taken from a river for air conditioning, it is determined at which water levels and water temperatures the air conditioning can be maintained for how long.
The maximum tolerable downtimes of utility facilities are suitable for meeting the availability requirements contained in the service level agreement.
Supplementary Information - About the CriteriaPremises and buildings related to the cloud service provided include data centres and server rooms housing system components used to process cloud customer data and the technical utilities required to operate these system components (e.g. power supply, refrigeration, fire-fighting, telecommunications, security, etc.). Backup or redundancy computer centres.
Premises and buildings operated by third parties are e.g. server housing, colocation, IaaS.
Premises and buildings in which no data from cloud customers is processed or stored (e.g. offices of the Cloud Service Provider, server rooms with system components for internal development and test systems) are not subject to this criteria area.
The recognised rules of technology are defined in relevant standards, e.g. EN 50600 (facilities and infrastructures of data centres).
Incorrect planning can endanger the operational safety and availability of the premises or buildings. This can result from an incorrect assessment of elementary hazards at the site (e.g. air traffic, earthquakes, floods, hazardous substances) as well as an incorrect conception of the bandwidth or energy supply.
Time specifications for selfsustaining operation as well as maximum tolerable downtimes of utility facilities are typically collected during the business impact analysis (cf. BCM02, BCM-03).
Redundancy model The cloud service is provided from two locations that are redundant to each other. The locations meet the security requirements of the Cloud Service Provider (cf. PS01 Security Concept) and are located in an adequate distance to each other to achieve operational redundancy. Operational redundancy is designed in a way that ensures that the availability requirements specified in the service level agreement are met. The functionality of the redundancy is checked at least annually by suitable tests and exercises (cf. BCM04 - Verification, updating and testing of business continuity).
Additonal CriteriaThe cloud service is provided from more than two locations that provide each other with redundancy. The locations are sufficiently far apart to achieve georedundancy. If two locations fail at the same time, at least one third location is still available to prevent a total service failure. The georedundancy is designed in a way that ensures that the availability requirements specified in the service level agreement are met.. The functionality of the redundancy is checked at least annually by suitable tests and exercises (cf. BCM04 Verification, updating and testing of business continuity).
Supplementary Information - About the CriteriaOperational redundancy of the sites to each other in the sense of the basic requirement is given, if based on the assessment of elementary risks at the site corresponding distances of the premises and buildings to these risks are maintained. Very extensive events which, due to their extent, could affect several sites of the same redundancy group simultaneously or in a timely manner (e.g. floods, earthquakes) are not considered.
A georedundancy of the sites to each other in the sense of the optional, more far-reaching requirement is given if a very extensive event at a site under no circumstances affects several sites of the same redundancy group simultaneously or promptly. The BSI publication "Kriterien für die Standortwahl höchstverfügbarer und georedundanter Rechenzentren" provides assistance in this regard.
There are cloud providers who no longer address the issue of reliability of the cloud service on a physical level through redundancy from two independent locations, but through resilience. The cloud service is provided simultaneously from more than two locations. The underlying distributed data centre architecture ensures that the failure of a location or components of a location does not violate the defined availability criteria of the cloud service. Such an architecture can represent an alternative fulfilment (cf. Chapter 4.4.7) of the criterion. The tests and exercises on functionality required in the criterion also apply analogously to resilient architectures.
Perimeter Protection The structural shell of premises and buildings related to the cloud service provided are physically solid and protected by adequate security measures that meet the security requirements of the Cloud Service Provider (cf. PS-01 Security Concept).
The security measures are designed to detect and prevent unauthorised access so that the information security of the cloud service is not compromised.
The outer doors, windows and other construction elements exhibit an appropriate security level and withstand a burglary attempt for at least 10 minutes.
The surrounding wall constructions as well as the locking mechanisms meet the associated requirements.
Additonal CriteriaThe security measures installed at the site include permanently present security personnel (at least 2 individuals), video surveillance and anti-burglary systems.
Supplementary Information - About the CriteriaSecurity measures for detecting unauthorised access can be security personnel, video surveillance or burglar alarm systems.
The resistance class RC4 according to DIN EN 1627 stipulates that doors, windows and other components must withstand a breakin attempt for at least 10 minutes. The US standard SDSTD-01.01 Rev.G. is an international equivalent to this standard.
Physical site access control At access points to premises and buildings related to the cloud service provided, physical access controls are set up in accordance with the Cloud Service Provider's security requirements (cf. PS-01 Security Concept) to prevent unauthorised access.
Access controls are supported by an access control system.
The requirements for the access control system are documented, communicated and provided in a policy or concept in accordance with SP-01 and include the following aspects:
• Specified procedure for the granting and revoking of access authorisations (cf. IDM02) based on the principle of least authorisation ("leastprivilegeprinciple") and as necessary for the performance of tasks ("needtoknowprinciple");
• Automatic revocation of access authorisations if they have not been used for a period of 2 month;
• Automatic withdrawal of access authorisations if they have not been used for a period of 6 months;
• Two-factor authentication for access to areas hosting system components that process cloud customer information;
• Visitors and external personnel are tracked individually by the access control during their work in the premises and buildings, identified as such (e.g. by visible wearing of a visitor pass) and supervised during their stay; and
• Existence and nature of access logging that enables the Cloud Service Provider, in the sense of an effectiveness audit, to check whether only defined personnel have entered the premises and buildings related to the cloud service provided.
Additonal Criteria-
Supplementary Information - About the Criteria-
Protection from fire and smoke Premises and buildings related to the cloud service provided are protected from fire and smoke by structural, technical and organisational measures that meet the security requirements of the Cloud Service Provider (cf. PS-01 Security Concept) and include the following aspects:
a) Structural Measures:
Establishment of fire sections with a fire resistance duration of at least 90 minutes for all structural parts.
b) Technical Measures:
• Early fire detection with automatic voltage release. The monitored areas are sufficiently fragmented to ensure that the prevention of the spread of incipient fires is proportionate to the maintenance of the availability of the cloud service provided;
• Extinguishing system or oxygen reduction; and
• Fire alarm system with reporting to the local fire department.
c) Organisational Measures
• Regular fire protection inspections to check compliance with fire protection requirements; and
• Regular fire protection exercises.
Additonal CriteriaThe environmental parameters are monitored. When the permitted control range is exceeded, alarm messages are generated and forwarded to the Cloud Service Provider’s subject matter experts
Supplementary Information - About the CriteriaThe monitoring of the environmental parameters is addressed in PS-01. When exceeding the allowed control range, alarm messages are generated and forwarded to the responsible Cloud Service Provider.Structural parts are walls, ceilings, floors, doors, ventilation flaps, etc.
Protection against interruptions caused by power failures and other such risks Measures to prevent the failure of the technical supply facilities required for the operation of system components with which information from cloud customers is processed, are documented and set up in accordance with the security requirements of the Cloud Service Provider (cf. PS-01 Security Concept) with respect to the following aspects:
a) Operational redundancy (N+1) in power and cooling supply
b) Use of appropriately sized uninterruptible power supplies (UPS) and emergency power systems (NEA), designed to ensure that all data remains undamaged in the event of a power failure. The functionality of UPS and NEA is checked at least annually by suitable tests and exercises (cf. BCM04 Verification, updating and testing of business continuity).
c) Maintenance (servicing, inspection, repair) of the utilities in accordance with the manufacturer's recommendations.
d) Protection of power supply and telecommunications lines against interruption, interference, damage and eavesdropping. The protection is checked regularly, but at least every two years, as well as in case of suspected manipulation by qualified personnel regarding the following aspects:
• Traces of violent attempts to open closed distributors;
• Uptodatedness of the documentation in the distribution list;
• Conformity of the actual wiring and patching with the documentation;
• The short-circuits and earthing of unneeded cables are intact; and
• Impermissible installations and modifications.
Additonal CriteriaUninterruptible Power Supplies (UPS) and Emergency Power Supplies (NPS) are designed to meet the availability requirements defined in the Service Level Agreement.
The cooling supply is designed in such a way that the permissible operating and environmental parameters are also ensured on at least five consecutive days with the highest outside temperatures measured to date within a radius of at least 50 km around the locations of the premises and buildings, with a safety margin of 3 K (in relation to the outside temperature). The Cloud Service Provider has previously determined the highest outdoor temperatures measured to date (cf. PS-01 Security Concept).
The connection to the telecommunications network is designed with sufficient redundancy so that the failure of a telecommunications network does not impair the security or performance of the Cloud Service Provider.
Supplementary Information - About the CriteriaMeasures to prevent the failure of the technical supply facilities are e.g. power supply, cooling, fire-fighting technology, telecommunications, security technology, etc.
Cloud Service Providers can ensure that all data remains undamaged in the event of a power failure by shutting down servers following a defined procedure.
Power supply and telecommunications lines can be protected against interruption, interference, damage and eavesdropping by e.g. underground supply via different supply routes.
Surveillance of operational and environmental parameters The operating parameters of the technical utilities (cf. PS06) and the environmental parameters of the premises and buildings related to the cloud service provided are monitored and controlled in accordance with the security requirements of the Cloud Service Provider (cf. PS01 Security Concept). When the permitted control range is exceeded, the responsible departments of the Cloud-Provider are automatically informed in order to promptly initiate the necessary measures for return to the control range.
Additonal Criteria-
Supplementary Information - About the CriteriaOperating parameters and environmental parameters of the premises and buildings are, e.g. air temperature and humidity, leakage.

1.1 Referințe

1.2 Cerințe identificate

1.3 Reglementări asociate

2. Cerințe identificate

Cerințe

3. Reglementări asociate

Reglementări