Physical & environmental security
Introduction
An effective physical security policy is crucial for protecting assets and ensuring a safe environment. Altus Group physical security is responsible for defining, developing, implementing, and managing all aspects of physical security for the protection of Altus group’s employees, facilities, business enterprise, and assets against potential threats and vulnerabilities.
Our guiding principles
To prevent unauthorized physical access, damage and interference to the organization’s information and other associated assets in offices, rooms, and facilities
To detect and deter unauthorized physical access.
To prevent or reduce the consequences of events originating from physical and environmental threats.
To protect information and other associated assets in secure areas from damage and unauthorized interference by employees working in these areas.
To prevent loss, damage, theft or compromise of off-site devices and interruption to the organization’s operations.
To prevent loss, damage or compromise of information and other associated assets, or interruption to the organization’s operations due to failure and disruption of supporting utilities.
Physical security management
A register of all premises and sensitive areas is maintained
Premises and sensitives areas are classified with regards to the potential impacts that would result from the loss of confidentiality, integrity or availability of data or systems in the physical security perimeter.
Physical entry
Access points such as delivery and loading areas and other points where unauthorized persons can enter the premises are controlled and, if possible, isolated from information processing facilities to avoid unauthorized access.
Physical mechanisms for the management of access to areas where information is processed or stored, and sensitive areas are in place.
Access to Altus Group premises is restricted to authorized persons only.
A mechanism is in place to control physical access to all Altus Group premises.
A key management process is in place to ensure the management of the physical keys or authentication information (e.g., lock codes, combination locks to offices, rooms, and facilities such as key cabinets).
Visitors
Managing access by visitors is important for several security reasons, all aimed at maintaining security and ensuring the safety of employees, visitors, assets, and sensitive information within Altus Group premises.
The identification and authentication of visitors by an appropriate means is carried out before entry to Altus Group premises.
Access to Altus Group premises by visitors is logged.
Physical security monitoring
Altus Group premises are continuously monitored for unauthorized physical access. Access to areas that house critical systems should be continuously monitored to detect unauthorized access or suspicious behaviour.
Entry and exit points have the capability to detect unauthorised access.
Key control
Keys provide access to various areas within a facility ranging from public spaces to sensitive and restricted areas, proper key control ensures that only authorised persons can access specific areas thus reducing the risk of unauthorised entry and potential security breaches.
Only authorised staff are permitted to possess keys to Altus Group premises outside of business hours.
A register of all issued keys is maintained and reviewed periodically.
Environmental protections and climate control
Having effective environmental protection measures in place is essential for several reasons. This is necessary to protect valuable assets. Adequate protection minimises the risk of disruptions and supports the continuity of operations.
Altus Group have measures are in place to monitor, regularly test, and protect physical assets from environmental threats (fire, electrical, climate, flood, etc.).
Appropriate redundancies are in place for environmental threats (fire, electrical, climate, flood, etc.).