Information System Protection

Placement locations shall be separated in consideration of the importance, purpose, and characteristics of information systems.

• Depending on the characteristics of information systems, such as information systems, personal information processing systems, network equipment, security systems, and backup equipment, protect the systems from the outside by using server racks
• For cases of high importance, such as personal information processing systems, install locking devices on server racks so that only a minimal number of personnel can access them, and manage them in a cage or similar with separate physical safeguards

A means to readily verify the actual physical location of information systems (layout diagrams, asset inventories, etc.) shall be prepared.

• Manage physical layout diagrams (facility cross-sections, layout diagrams, etc.) and asset inventories for prompt action in the event of a security incident or failure
• Include a physical location field in asset inventories and keep them current so that the latest version is maintained

Power and communication cables shall be safely protected from physical damage and electrical influence.

• Take measures such as physical separation/wiring, identification marking, maintaining distance to avoid mutual interference, and burying cables
• Apply access control so that only a minimal number of authorized personnel can access distribution boards, high-voltage rooms, low-voltage rooms, etc.