Designation of Protected Areas

To protect personal information and important information, documents, storage media, key facilities and systems, and the like from physical/environmental threats, criteria for designating physical protected areas such as controlled areas, restricted areas, and reception areas shall be established.

• Designate physical protected areas as reception areas, restricted areas, controlled areas, and the like

• Select the terminology and classification of protected areas to suit the organization's environment

  ※ Physical protected areas (examples)

  • Reception area : an area where outsiders can enter without a separate access pass (e.g. : reception area)
  • Restricted area : a place where separate access control devices and monitoring systems are installed to prevent unauthorized access, and where an access pass such as a staff card is required to enter (e.g. : departmental offices)
  • Controlled area : a place that includes all the control items of a restricted area, where access eligibility is kept to the minimum number of persons, and where additional procedures are required for entry (e.g. : computer room, communications equipment room, control room, HVAC room, power generation room, power supply room)

Protected areas shall be designated in accordance with the physical protected area designation criteria, and protective measures for each zone shall be established/implemented.

• Apply protective measures for each zone, such as access control methods (ID card, biometrics, etc.), authorized entrants, entry procedures, and video surveillance
• Since access authorization to controlled areas is kept to a minimum even within the organization, mark them as controlled areas where necessary to fundamentally block access attempts in the first place, and periodically review whether any unlawful access attempts have occurred