5330    PHYSICAL AND ENVIRONMENTAL SECURITY
(New 03/08)

Physical Security Practices prevent unauthorized physical access, damage, and interruption to an agency's assets. Physical security practices for each facility must be adequate to protect the most sensitive information technology application housed in that facility. Agencies must take the appropriate physical security measures to provide for:

1. Management control of physical access to information assets (including personal computer systems, computer terminals, and mobile devices) by agency staff and outsiders.
   
   
2. Prevention, detection, and suppression of fires.
   
   
3. Prevention, detection, and minimization of water damage.
   
   
4. Protection, detection, and minimization of loss or disruption of operational capabilities due to electrical power fluctuations or failure.

AUTHORITY          STANDARDS          GUIDANCE          FORMS          TOOLS