Laserfiche WebLink
Security Policies and Procedures <br />Physical Security: These may occur within Virtru where the overall building is operated <br />to a lower level of security, but a certain area is more controlled due to documents, <br />assets or processes which occur in that area. <br />B. Secure Sites Policy <br />Secure sites shall be established for all computing centers and other locations where <br />there is a concentration of high -value or sensitive information, systems or networks. <br />Sites will be designed and operated according to best practices and in consideration of <br />threats appropriate to the site such as hurricanes, tornados, power outages and <br />intruders. <br />This standard is not to be construed as a complete list of requirements for a secure site. <br />It should be used in conjunction with expert advice, architects, fire marshals, OSHA and <br />other regulations. <br />Separate, isolated areas will be created within the secure site for: <br />1. Media libraries <br />2. Electrical supplies and controls <br />3. Environmental and mechanical controls <br />Access to these sub -areas will be on a need -only basis. Critical assets and operations <br />must be conducted in a secured area or secured site, with protections implemented in <br />accordance with the risks and value of the assets, information and operations. <br />C. Data Centers <br />All data centers used by the company must provide proof that they meet or exceed the <br />security requirements and standards of the company. <br />XXVI. Physical Security Policy <br />A. Entry Policy <br />All Virtru's workforce members are allowed access to the physical site at any time of <br />the day, and any day of the week. The site is secured with an electronic door lock that <br />accepts RFID cards and a numeric passcode. RFID cards are issued by the ISO or AISO <br />by request and after approval. <br />B. Loss of RFID key <br />If a workforce member loses their RFID key, they will notify the ISO or AISO as soon as <br />possible so the key may be deactivated. Any workforce member found to have violated <br />Rev.2015.8.6 <br />52 <br />