This policy will help your organization safeguard its hardware, software and data from exposure to persons (internal or external) who could intentionally or inadvertently harm your business and/or damage physical assets.

From the policy:

PHYSICAL SECURITY GUIDELINES AND REQUIREMENTS

The following guidelines should be followed in designing and enforcing access to IT assets.

Server room/IT equipment room access:

Access to server rooms and IT equipment rooms should be restricted to only those whose job responsibilities require that they maintain the equipment or infrastructure of the room.

Signs should be placed at the entrance to server rooms and IT equipment rooms, warning that access is restricted to authorized personnel and prohibiting food, drink and smoking.

Server rooms and IT equipment rooms should not double as office space or storage space or any other shared purpose.

Doors to server rooms and IT equipment rooms should be fireproof and secured with deadbolt type locks that can’t be easily picked.

Access to server rooms and IT equipment rooms should be controlled by a strong authentication method, such as an electronic combination lock, a badge reader, a fingerprint reader or other biometric scanning devices. Lock combinations should be changed on a regular basis.