Plan physical security for system documentation and storage media

This topic describes the importance of securing important system documentation and storage media. Emphasis placed on storing these items in two locations, both on-site and offsite.

System documentation includes information that IBM^® sends with the system, password information, your planning forms, and any reports that the system generates. Depending on your system, backup media can include tapes, CD-ROMs, diskettes, or DVD storage. You should store both system documentation and backup media at your business location as well as at another remote location. In case of a disaster, you will need this information to recover your system.

Storing system documentation securely

Service tools and security officer passwords are critical to the operation of your system. You should write these passwords down and store them in a safe, confidential location. In addition, keep a copy of these passwords at an offsite location to help you recover from a disaster.

Consider storing other important system documentation, such configuration settings and your main application libraries, away from your business location to help you recover from a disaster.

Storing your storage media securely

When you install your system, make plans for regularly saving all the information on the system to tape or other storage media. These backups allow you to recover your system if necessary. You should keep these backups in a secure location offsite as well.

Risks related to backup media and password information

Damage to backup media: If a disaster or vandals destroyed your system backup media, you could not recover the information that was on your system, except from printed reports.
Theft of backup media or passwords: You may have confidential business information saved on your backup media. A knowledgeable person might be able to restore this information to another computer and print or process it.

What to do to keep your storage media and passwords secure

The following information suggests ways to store your system documentation and storage media. After you have decided on your method, record your choices on the Backup Media and Documentation section of the Physical Security Planning worksheet:

Store all passwords and backup media in a locked, fireproof cabinet.
Take copies of your backup media to a secure, offsite location on a regular basis, for example, at least weekly.

Example: Physical security planning form—backup media and documentation

Table 1. Physical Security Planning Form: Backup Media and Documentation
Backup Media and Documentation
Where are backup tapes stored at your business location?	`In a fireproof safe.`
Where are backup tapes stored away from your business location?	`In a fireproof safe at the office of our company's accountant.`
Where are the security officer, service, and DST passwords kept?	`In the manager's office.`
Where is important system documentation, such as the serial number and the configuration, kept?	`In a fireproof safe at the office of our company's accountant.`

After you plan your storage and documentation security, you can plan physical security for your workstations.