{"id":1081,"date":"2014-03-23T20:56:29","date_gmt":"2014-03-23T20:56:29","guid":{"rendered":"http:\/\/www.halkynconsulting.co.uk\/a\/?p=1081"},"modified":"2014-03-23T21:25:56","modified_gmt":"2014-03-23T21:25:56","slug":"physical-security-data-protection","status":"publish","type":"post","link":"http:\/\/www.halkynconsulting.co.uk\/a\/2014\/03\/physical-security-data-protection\/","title":{"rendered":"Physical security is important for data protection"},"content":{"rendered":"<figure id=\"attachment_910\" aria-describedby=\"caption-attachment-910\" style=\"width: 300px\" class=\"wp-caption alignright\"><img loading=\"lazy\" decoding=\"async\" data-attachment-id=\"910\" data-permalink=\"http:\/\/www.halkynconsulting.co.uk\/a\/2013\/09\/physical-security-still-matters\/information-security-service-lg\/\" data-orig-file=\"https:\/\/i0.wp.com\/www.halkynconsulting.co.uk\/a\/wp-content\/uploads\/2013\/09\/information-security-service.lg_.jpg?fit=2304%2C1532&amp;ssl=1\" data-orig-size=\"2304,1532\" data-comments-opened=\"1\" data-image-meta=\"{&quot;aperture&quot;:&quot;3.5&quot;,&quot;credit&quot;:&quot;&quot;,&quot;camera&quot;:&quot;&quot;,&quot;caption&quot;:&quot;&quot;,&quot;created_timestamp&quot;:&quot;1269171653&quot;,&quot;copyright&quot;:&quot;&quot;,&quot;focal_length&quot;:&quot;50&quot;,&quot;iso&quot;:&quot;0&quot;,&quot;shutter_speed&quot;:&quot;0.025&quot;,&quot;title&quot;:&quot;&quot;}\" data-image-title=\"Physical security protects information\" data-image-description=\"&lt;p&gt;Good physical security protects your information.&lt;\/p&gt;\n\" data-image-caption=\"&lt;p&gt;Good physical security protects your information.&lt;\/p&gt;\n\" data-medium-file=\"https:\/\/i0.wp.com\/www.halkynconsulting.co.uk\/a\/wp-content\/uploads\/2013\/09\/information-security-service.lg_.jpg?fit=300%2C199&amp;ssl=1\" data-large-file=\"https:\/\/i0.wp.com\/www.halkynconsulting.co.uk\/a\/wp-content\/uploads\/2013\/09\/information-security-service.lg_.jpg?fit=1024%2C680&amp;ssl=1\" class=\"size-medium wp-image-910\" alt=\"Good physical security protects your information.\" src=\"https:\/\/i0.wp.com\/www.halkynsecurity.co.uk\/a\/wp-content\/uploads\/2013\/09\/information-security-service.lg_-300x199.jpg?resize=300%2C199\" width=\"300\" height=\"199\" srcset=\"https:\/\/i0.wp.com\/www.halkynconsulting.co.uk\/a\/wp-content\/uploads\/2013\/09\/information-security-service.lg_.jpg?resize=300%2C199&amp;ssl=1 300w, https:\/\/i0.wp.com\/www.halkynconsulting.co.uk\/a\/wp-content\/uploads\/2013\/09\/information-security-service.lg_.jpg?resize=1024%2C680&amp;ssl=1 1024w, https:\/\/i0.wp.com\/www.halkynconsulting.co.uk\/a\/wp-content\/uploads\/2013\/09\/information-security-service.lg_.jpg?resize=120%2C80&amp;ssl=1 120w\" sizes=\"auto, (max-width: 300px) 100vw, 300px\" data-recalc-dims=\"1\" \/><figcaption id=\"caption-attachment-910\" class=\"wp-caption-text\">Good physical security protects your information.<\/figcaption><\/figure>\n<p>Physical security has always been a cornerstone of any Information Security program. As a topic, it is covered by every major security standard. Most have entire sections dedicated to physical security:<\/p>\n<ul>\n<li>ISO27001:2013 has A.11<em> &#8220;Physical and Environmental Controls<\/em>&#8220;<\/li>\n<li>The SoGP has CF3.3 &#8220;<em>Sensitive Physical Information<\/em>&#8221; and CF19 &#8220;Physical and Environmental Security&#8221;<\/li>\n<li>PCI-DSS Requirement 9 mandates &#8220;<em>Restrict physical access to cardholder data<\/em>&#8220;<\/li>\n<li>The NIST Cybersecurity framework includes PR.AC-2: &#8220;<em>Physical access to assets is managed and protected<\/em>.&#8221;<\/li>\n<li>Even the 1995 NIST SP800-12<em>\u00a0&#8220;Introduction to Computer Security: The NIST Handbook,&#8221;<\/em> has Chapter 15 dedicated to physical security.<\/li>\n<li>The UK Government&#8217;s <a title=\"Security Policy Framework (SPF) October 2013 version\" href=\"https:\/\/www.gov.uk\/government\/uploads\/system\/uploads\/attachment_data\/file\/255910\/HMG_Security_Policy_Framework_V11.0.pdf\" target=\"_blank\">Security Policy Framework (SPF) October 2013<\/a> version includes it as Security Policy 4 &#8220;<em>Physical security and counter terrorism<\/em>.&#8221;<\/li>\n<\/ul>\n<p>Despite this, controls are still being neglected. Private sector organisations and government agencies spend fortunes on security, but then compromise it by missing out physical controls.<\/p>\n<p>What makes this stranger is that most physical security controls are cheap and easy to implement. Maybe it is just they aren&#8217;t flashy and aren&#8217;t normally excitingly high-tech. Good security controls just work.<\/p>\n<h2>The perils of ignoring physical security<\/h2>\n<p>The Information Commissioner&#8217;s Office (ICO) has been busy enforcing the Data Protection Act this month, with a couple of actions being directly down to poor physical security practices.<\/p>\n<p>First, on 13 March 2014, the <a title=\"Home care agency warned after vulnerable people\u2019s details left in the street\" href=\"http:\/\/ico.org.uk\/news\/latest_news\/2014\/home-care-agency-warned-after-vulnerable-peoples-details-left-in-the-street-13032014\" target=\"_blank\">ICO announced<\/a> that it had issued an enforcement notice on Neath Care, with the following message:<\/p>\n<blockquote><p>[Neath Care] has been found in breach of the Data Protection Act after the files of 10 vulnerable and elderly people were found on a street in Neath Port Talbot.<\/p><\/blockquote>\n<p>It appears that the care agency failed to implement basic physical security controls such as asset management, monitoring and transport. This led to an employee taking the documents out of the office, dropping them and not realising until a member of the public reported it.<\/p>\n<p>Often organisations have excellent controls around the expensive things (e.g. computers, laptops) but then forget everyone once the data has come off the printer. It seems unlikely that an employee would leave a laptop on the pavement and not notice.<\/p>\n<p>When handling sensitive data, organisations should have a comprehensive security strategy which includes handling, and accounting for, paper copies. All employees should be made aware of this and, as always, records must be kept.<\/p>\n<p>The next breach of interest was reported by the ICO in a <a title=\"Kent Police fined \u00a3100,000 after interview tapes abandoned at former station\" href=\"http:\/\/ico.org.uk\/news\/latest_news\/2014\/kent-police-fined-100000-after-interview-tapes-abandoned-at-former-station-19032014\" target=\"_blank\">19 March announcement<\/a>. This time it was serious enough\u00a0that Kent Police were fined \u00a3100,000. This was quite a shocking example of how people can forget to track old, low-financial-value physical assets:<\/p>\n<blockquote>\n<p align=\"left\">The Information Commissioner\u2019s Office has served\u00a0<a title=\"ICO has served a Monetary Penalty Notice on Kent Police\" href=\"http:\/\/ico.org.uk\/news\/latest_news\/2014\/~\/media\/documents\/library\/Data_Protection\/Notices\/kent-police-monetary-penalty-notice.pdf\" target=\"_blank\">a monetary penalty of \u00a3100,000<\/a>\u00a0on Kent Police after confidential information, including copies of police interview tapes, was left in the basement of a former police station.<\/p>\n<p align=\"left\">The highly sensitive information included records relating back to the 1980s, thought to have been left at the site when the building was vacated in July 2009.<\/p>\n<p align=\"left\">The information was discovered when a police officer was visiting a business owner about an unrelated matter on 27 November 2012 and noticed a pile of tapes with the logo of Kent Police stuck on them. The business owner confirmed that he had found the tapes in the basement of the old police station, after purchasing the site two months before, and was planning on watching them for entertainment.<\/p>\n<\/blockquote>\n<p>It is almost certain that none of the officers or staff abandoned these tapes on purpose. It is almost certain that the business owner took them with malicious intent. However, the breach still happened.<\/p>\n<p>Most people will agree that police interview tapes are pretty sensitive affairs. The officers will be asking questions about crimes, possibly including otherwise unreported information, and the interviewee will be providing information they may not expect anyone else to hear.<\/p>\n<p>Given that these tapes may have ended up being used as evidence, it seems strange that they weren&#8217;t properly accounted for when the station moved offices. The problem is often that boring, &#8220;old-fashioned,&#8221; equipment is frequently overlooked when people concentrate on the modern equivalents.<\/p>\n<p>The ICO&#8217;s Head of Enforcement sums it up well:<\/p>\n<blockquote>\n<p align=\"left\">How a police force could leave such information unattended in a basement for several years is difficult to understand.<\/p>\n<p align=\"left\">Ultimately, this breach was a result of a clear lack of oversight, information governance and guidance from Kent Police which led to sensitive information being abandoned.<\/p>\n<\/blockquote>\n<p>Good information governance has to include good physical security controls &#8211; the most basic of which is making sure you know where your assets are. Anything else is basically asking for a breach.<\/p>\n<h2>Physical security underpins everything<\/h2>\n<p>This is the crucial point. Good physical security controls are so important that, without them, all your other controls are undermined to the degree that they may become pointless.<\/p>\n<p>Good physical security controls are cheap &#8211; in the two cases here, a simple asset register would have saved both organisations &#8211; and easy to implement. They don&#8217;t make headline news, they don&#8217;t get people exited on twitter, they don&#8217;t come with flashy vendor presentations, but they <strong>do work<\/strong>. Isn&#8217;t that what actually matters?<\/p>\n<h2>Physical Security Assessment Form &#8211; Free Download<\/h2>\n<figure id=\"attachment_1097\" aria-describedby=\"caption-attachment-1097\" style=\"width: 187px\" class=\"wp-caption alignleft\"><a href=\"http:\/\/www.halkynconsulting.co.uk\/security-resources\/downloads\/physical_security_assessment_form.pdf\"><img loading=\"lazy\" decoding=\"async\" data-attachment-id=\"1097\" data-permalink=\"http:\/\/www.halkynconsulting.co.uk\/a\/2014\/03\/physical-security-data-protection\/physicalsecurityassessmentform\/\" data-orig-file=\"https:\/\/i0.wp.com\/www.halkynconsulting.co.uk\/a\/wp-content\/uploads\/2014\/03\/physicalsecurityassessmentform.png?fit=800%2C1149&amp;ssl=1\" data-orig-size=\"800,1149\" data-comments-opened=\"1\" data-image-meta=\"{&quot;aperture&quot;:&quot;0&quot;,&quot;credit&quot;:&quot;&quot;,&quot;camera&quot;:&quot;&quot;,&quot;caption&quot;:&quot;&quot;,&quot;created_timestamp&quot;:&quot;0&quot;,&quot;copyright&quot;:&quot;&quot;,&quot;focal_length&quot;:&quot;0&quot;,&quot;iso&quot;:&quot;0&quot;,&quot;shutter_speed&quot;:&quot;0&quot;,&quot;title&quot;:&quot;&quot;}\" data-image-title=\"Physical Security Assessment Form &#8211; Free Download\" data-image-description=\"&lt;p&gt;Physical Security Assessment Form &#8211; Free Download&lt;\/p&gt;\n\" data-image-caption=\"&lt;p&gt;Physical Security Assessment Form &#8211; Free Download&lt;\/p&gt;\n\" data-medium-file=\"https:\/\/i0.wp.com\/www.halkynconsulting.co.uk\/a\/wp-content\/uploads\/2014\/03\/physicalsecurityassessmentform.png?fit=208%2C300&amp;ssl=1\" data-large-file=\"https:\/\/i0.wp.com\/www.halkynconsulting.co.uk\/a\/wp-content\/uploads\/2014\/03\/physicalsecurityassessmentform.png?fit=712%2C1024&amp;ssl=1\" class=\"wp-image-1097 \" title=\"Physical Security Assessment Form - Free Download\" alt=\"Physical Security Assessment Form - Free Download\" src=\"https:\/\/i0.wp.com\/www.halkynsecurity.co.uk\/a\/wp-content\/uploads\/2014\/03\/physicalsecurityassessmentform-208x300.png?resize=187%2C270\" width=\"187\" height=\"270\" srcset=\"https:\/\/i0.wp.com\/www.halkynconsulting.co.uk\/a\/wp-content\/uploads\/2014\/03\/physicalsecurityassessmentform.png?resize=208%2C300&amp;ssl=1 208w, https:\/\/i0.wp.com\/www.halkynconsulting.co.uk\/a\/wp-content\/uploads\/2014\/03\/physicalsecurityassessmentform.png?resize=712%2C1024&amp;ssl=1 712w, https:\/\/i0.wp.com\/www.halkynconsulting.co.uk\/a\/wp-content\/uploads\/2014\/03\/physicalsecurityassessmentform.png?w=800&amp;ssl=1 800w\" sizes=\"auto, (max-width: 187px) 100vw, 187px\" data-recalc-dims=\"1\" \/><\/a><figcaption id=\"caption-attachment-1097\" class=\"wp-caption-text\">Physical Security Assessment Form &#8211; Free Download<\/figcaption><\/figure>\n<p>Halkyn Consulting has produced a <a title=\"Physical Security Assessment Form - Free Download\" href=\"http:\/\/www.halkynconsulting.co.uk\/security-resources\/downloads\/physical_security_assessment_form.pdf\" target=\"_blank\">physical security assessment form as a freely downloadable resource<\/a> to help organisations get a baseline of their current security and see what areas need improving.<\/p>\n<p>In addition to this form, our <a title=\"Halkyn Consulting Security Resources\" href=\"http:\/\/www.halkynconsulting.co.uk\/security-resources\/index\" target=\"_blank\">security resources area<\/a> has a selection of other tools you can use to assess, understand and improve your physical security controls.<\/p>\n<p>As part of our commitment to improving security awareness in general, if there is a specific tool you cant find but think would help people then please <a title=\"Contact Halkyn Security Team\" href=\"http:\/\/www.halkynconsulting.co.uk\/security\/contact-security-team\" target=\"_blank\">get in touch<\/a> and we will see if we can help you out.<\/p>\n<p><strong>Remember &#8211; all good security builds on good physical security controls.<\/strong><\/p>\n","protected":false},"excerpt":{"rendered":"<p>Physical security has always been a cornerstone of any Information Security program. As a topic, it is covered by every major security standard. Most have entire sections dedicated to physical security: ISO27001:2013 has A.11 &#8220;Physical and Environmental Controls&#8220; The SoGP has CF3.3 &#8220;Sensitive Physical Information&#8221; and CF19 &#8220;Physical and Environmental Security&#8221; PCI-DSS Requirement 9 mandates [&hellip;]<\/p>\n","protected":false},"author":1,"featured_media":1097,"comment_status":"open","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"jetpack_post_was_ever_published":false,"footnotes":"","jetpack_publicize_message":"","jetpack_is_tweetstorm":false,"jetpack_publicize_feature_enabled":true},"categories":[29,5,21],"tags":[76,23,24,100,69,7,20,140],"class_list":["post-1081","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-downloads","category-security","category-security-risk-management","tag-breach","tag-business-protection","tag-data-protection","tag-dpa","tag-ico","tag-physsec","tag-risk-management","tag-security","entry","has-media"],"jetpack_publicize_connections":[],"yoast_head":"<!-- This site is optimized with the Yoast SEO plugin v19.9 - https:\/\/yoast.com\/wordpress\/plugins\/seo\/ -->\n<title>Physical security is important for data protection - dont ignore it.<\/title>\n<meta name=\"description\" content=\"Physical security is an important part of your Information and IT security programmes, yet physical controls are often forgotten about.\" \/>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"http:\/\/www.halkynconsulting.co.uk\/a\/2014\/03\/physical-security-data-protection\/\" \/>\n<meta property=\"og:locale\" content=\"en_GB\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"Physical security is important for data protection - dont ignore it.\" \/>\n<meta property=\"og:description\" content=\"Physical security is an important part of your Information and IT security programmes, yet physical controls are often forgotten about.\" \/>\n<meta property=\"og:url\" content=\"http:\/\/www.halkynconsulting.co.uk\/a\/2014\/03\/physical-security-data-protection\/\" \/>\n<meta property=\"og:site_name\" content=\"Halkyn Security Blog\" \/>\n<meta property=\"article:published_time\" content=\"2014-03-23T20:56:29+00:00\" \/>\n<meta property=\"article:modified_time\" content=\"2014-03-23T21:25:56+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/i0.wp.com\/www.halkynconsulting.co.uk\/a\/wp-content\/uploads\/2014\/03\/physicalsecurityassessmentform.png?fit=800%2C1149&ssl=1\" \/>\n\t<meta property=\"og:image:width\" content=\"800\" \/>\n\t<meta property=\"og:image:height\" content=\"1149\" \/>\n\t<meta property=\"og:image:type\" content=\"image\/png\" \/>\n<meta name=\"author\" content=\"Halkyn Security\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:creator\" content=\"@HalkynSecurity\" \/>\n<meta name=\"twitter:site\" content=\"@HalkynSecurity\" \/>\n<meta name=\"twitter:label1\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data1\" content=\"Halkyn Security\" \/>\n\t<meta name=\"twitter:label2\" content=\"Estimated reading time\" \/>\n\t<meta name=\"twitter:data2\" content=\"5 minutes\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\/\/schema.org\",\"@graph\":[{\"@type\":\"Article\",\"@id\":\"http:\/\/www.halkynconsulting.co.uk\/a\/2014\/03\/physical-security-data-protection\/#article\",\"isPartOf\":{\"@id\":\"http:\/\/www.halkynconsulting.co.uk\/a\/2014\/03\/physical-security-data-protection\/\"},\"author\":{\"name\":\"Halkyn Security\",\"@id\":\"http:\/\/www.halkynconsulting.co.uk\/a\/#\/schema\/person\/3cfcd2267f12bbcce6a10159022c3df2\"},\"headline\":\"Physical security is important for data protection\",\"datePublished\":\"2014-03-23T20:56:29+00:00\",\"dateModified\":\"2014-03-23T21:25:56+00:00\",\"mainEntityOfPage\":{\"@id\":\"http:\/\/www.halkynconsulting.co.uk\/a\/2014\/03\/physical-security-data-protection\/\"},\"wordCount\":993,\"commentCount\":0,\"publisher\":{\"@id\":\"http:\/\/www.halkynconsulting.co.uk\/a\/#organization\"},\"keywords\":[\"Breach\",\"Business Protection\",\"Data Protection\",\"DPA\",\"ICO\",\"Physical Security\",\"Risk Management\",\"Security\"],\"articleSection\":[\"Downloads\",\"Security\",\"Security Risk Management\"],\"inLanguage\":\"en-GB\",\"potentialAction\":[{\"@type\":\"CommentAction\",\"name\":\"Comment\",\"target\":[\"http:\/\/www.halkynconsulting.co.uk\/a\/2014\/03\/physical-security-data-protection\/#respond\"]}]},{\"@type\":\"WebPage\",\"@id\":\"http:\/\/www.halkynconsulting.co.uk\/a\/2014\/03\/physical-security-data-protection\/\",\"url\":\"http:\/\/www.halkynconsulting.co.uk\/a\/2014\/03\/physical-security-data-protection\/\",\"name\":\"Physical security is important for data protection - dont ignore it.\",\"isPartOf\":{\"@id\":\"http:\/\/www.halkynconsulting.co.uk\/a\/#website\"},\"datePublished\":\"2014-03-23T20:56:29+00:00\",\"dateModified\":\"2014-03-23T21:25:56+00:00\",\"description\":\"Physical security is an important part of your Information and IT security programmes, yet physical controls are often forgotten about.\",\"breadcrumb\":{\"@id\":\"http:\/\/www.halkynconsulting.co.uk\/a\/2014\/03\/physical-security-data-protection\/#breadcrumb\"},\"inLanguage\":\"en-GB\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"http:\/\/www.halkynconsulting.co.uk\/a\/2014\/03\/physical-security-data-protection\/\"]}]},{\"@type\":\"BreadcrumbList\",\"@id\":\"http:\/\/www.halkynconsulting.co.uk\/a\/2014\/03\/physical-security-data-protection\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Halkyn Security\",\"item\":\"http:\/\/www.halkynconsulting.co.uk\/a\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"Downloads\",\"item\":\"http:\/\/www.halkynconsulting.co.uk\/a\/category\/downloads\/\"},{\"@type\":\"ListItem\",\"position\":3,\"name\":\"Physical security is important for data protection\"}]},{\"@type\":\"WebSite\",\"@id\":\"http:\/\/www.halkynconsulting.co.uk\/a\/#website\",\"url\":\"http:\/\/www.halkynconsulting.co.uk\/a\/\",\"name\":\"Halkyn Security Blog\",\"description\":\"Specialist Security &amp; Risk Management Consultants\",\"publisher\":{\"@id\":\"http:\/\/www.halkynconsulting.co.uk\/a\/#organization\"},\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"http:\/\/www.halkynconsulting.co.uk\/a\/?s={search_term_string}\"},\"query-input\":\"required name=search_term_string\"}],\"inLanguage\":\"en-GB\"},{\"@type\":\"Organization\",\"@id\":\"http:\/\/www.halkynconsulting.co.uk\/a\/#organization\",\"name\":\"Halkyn Consulting\",\"url\":\"http:\/\/www.halkynconsulting.co.uk\/a\/\",\"logo\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-GB\",\"@id\":\"http:\/\/www.halkynconsulting.co.uk\/a\/#\/schema\/logo\/image\/\",\"url\":\"https:\/\/i0.wp.com\/www.halkynconsulting.co.uk\/a\/wp-content\/uploads\/2011\/07\/Untitled-1.png?fit=990%2C170&ssl=1\",\"contentUrl\":\"https:\/\/i0.wp.com\/www.halkynconsulting.co.uk\/a\/wp-content\/uploads\/2011\/07\/Untitled-1.png?fit=990%2C170&ssl=1\",\"width\":\"990\",\"height\":\"170\",\"caption\":\"Halkyn Consulting\"},\"image\":{\"@id\":\"http:\/\/www.halkynconsulting.co.uk\/a\/#\/schema\/logo\/image\/\"},\"sameAs\":[\"https:\/\/www.linkedin.com\/company\/2329571\",\"https:\/\/twitter.com\/HalkynSecurity\"]},{\"@type\":\"Person\",\"@id\":\"http:\/\/www.halkynconsulting.co.uk\/a\/#\/schema\/person\/3cfcd2267f12bbcce6a10159022c3df2\",\"name\":\"Halkyn Security\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-GB\",\"@id\":\"http:\/\/www.halkynconsulting.co.uk\/a\/#\/schema\/person\/image\/\",\"url\":\"https:\/\/secure.gravatar.com\/avatar\/4126abc936773e5e8bd38e030d54306e161190a7d6166dba7edadb6caf13b504?s=96&d=retro&r=g\",\"contentUrl\":\"https:\/\/secure.gravatar.com\/avatar\/4126abc936773e5e8bd38e030d54306e161190a7d6166dba7edadb6caf13b504?s=96&d=retro&r=g\",\"caption\":\"Halkyn Security\"},\"description\":\"Halkyn Security Consultants.\",\"sameAs\":[\"http:\/\/www.halkynconsulting.co.uk\/\"],\"url\":\"http:\/\/www.halkynconsulting.co.uk\/a\/author\/halkyn-consulting\/\"}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"Physical security is important for data protection - dont ignore it.","description":"Physical security is an important part of your Information and IT security programmes, yet physical controls are often forgotten about.","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"http:\/\/www.halkynconsulting.co.uk\/a\/2014\/03\/physical-security-data-protection\/","og_locale":"en_GB","og_type":"article","og_title":"Physical security is important for data protection - dont ignore it.","og_description":"Physical security is an important part of your Information and IT security programmes, yet physical controls are often forgotten about.","og_url":"http:\/\/www.halkynconsulting.co.uk\/a\/2014\/03\/physical-security-data-protection\/","og_site_name":"Halkyn Security Blog","article_published_time":"2014-03-23T20:56:29+00:00","article_modified_time":"2014-03-23T21:25:56+00:00","og_image":[{"width":800,"height":1149,"url":"https:\/\/i0.wp.com\/www.halkynconsulting.co.uk\/a\/wp-content\/uploads\/2014\/03\/physicalsecurityassessmentform.png?fit=800%2C1149&ssl=1","type":"image\/png"}],"author":"Halkyn Security","twitter_card":"summary_large_image","twitter_creator":"@HalkynSecurity","twitter_site":"@HalkynSecurity","twitter_misc":{"Written by":"Halkyn Security","Estimated reading time":"5 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"Article","@id":"http:\/\/www.halkynconsulting.co.uk\/a\/2014\/03\/physical-security-data-protection\/#article","isPartOf":{"@id":"http:\/\/www.halkynconsulting.co.uk\/a\/2014\/03\/physical-security-data-protection\/"},"author":{"name":"Halkyn Security","@id":"http:\/\/www.halkynconsulting.co.uk\/a\/#\/schema\/person\/3cfcd2267f12bbcce6a10159022c3df2"},"headline":"Physical security is important for data protection","datePublished":"2014-03-23T20:56:29+00:00","dateModified":"2014-03-23T21:25:56+00:00","mainEntityOfPage":{"@id":"http:\/\/www.halkynconsulting.co.uk\/a\/2014\/03\/physical-security-data-protection\/"},"wordCount":993,"commentCount":0,"publisher":{"@id":"http:\/\/www.halkynconsulting.co.uk\/a\/#organization"},"keywords":["Breach","Business Protection","Data Protection","DPA","ICO","Physical Security","Risk Management","Security"],"articleSection":["Downloads","Security","Security Risk Management"],"inLanguage":"en-GB","potentialAction":[{"@type":"CommentAction","name":"Comment","target":["http:\/\/www.halkynconsulting.co.uk\/a\/2014\/03\/physical-security-data-protection\/#respond"]}]},{"@type":"WebPage","@id":"http:\/\/www.halkynconsulting.co.uk\/a\/2014\/03\/physical-security-data-protection\/","url":"http:\/\/www.halkynconsulting.co.uk\/a\/2014\/03\/physical-security-data-protection\/","name":"Physical security is important for data protection - dont ignore it.","isPartOf":{"@id":"http:\/\/www.halkynconsulting.co.uk\/a\/#website"},"datePublished":"2014-03-23T20:56:29+00:00","dateModified":"2014-03-23T21:25:56+00:00","description":"Physical security is an important part of your Information and IT security programmes, yet physical controls are often forgotten about.","breadcrumb":{"@id":"http:\/\/www.halkynconsulting.co.uk\/a\/2014\/03\/physical-security-data-protection\/#breadcrumb"},"inLanguage":"en-GB","potentialAction":[{"@type":"ReadAction","target":["http:\/\/www.halkynconsulting.co.uk\/a\/2014\/03\/physical-security-data-protection\/"]}]},{"@type":"BreadcrumbList","@id":"http:\/\/www.halkynconsulting.co.uk\/a\/2014\/03\/physical-security-data-protection\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Halkyn Security","item":"http:\/\/www.halkynconsulting.co.uk\/a\/"},{"@type":"ListItem","position":2,"name":"Downloads","item":"http:\/\/www.halkynconsulting.co.uk\/a\/category\/downloads\/"},{"@type":"ListItem","position":3,"name":"Physical security is important for data protection"}]},{"@type":"WebSite","@id":"http:\/\/www.halkynconsulting.co.uk\/a\/#website","url":"http:\/\/www.halkynconsulting.co.uk\/a\/","name":"Halkyn Security Blog","description":"Specialist Security &amp; Risk Management Consultants","publisher":{"@id":"http:\/\/www.halkynconsulting.co.uk\/a\/#organization"},"potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"http:\/\/www.halkynconsulting.co.uk\/a\/?s={search_term_string}"},"query-input":"required name=search_term_string"}],"inLanguage":"en-GB"},{"@type":"Organization","@id":"http:\/\/www.halkynconsulting.co.uk\/a\/#organization","name":"Halkyn Consulting","url":"http:\/\/www.halkynconsulting.co.uk\/a\/","logo":{"@type":"ImageObject","inLanguage":"en-GB","@id":"http:\/\/www.halkynconsulting.co.uk\/a\/#\/schema\/logo\/image\/","url":"https:\/\/i0.wp.com\/www.halkynconsulting.co.uk\/a\/wp-content\/uploads\/2011\/07\/Untitled-1.png?fit=990%2C170&ssl=1","contentUrl":"https:\/\/i0.wp.com\/www.halkynconsulting.co.uk\/a\/wp-content\/uploads\/2011\/07\/Untitled-1.png?fit=990%2C170&ssl=1","width":"990","height":"170","caption":"Halkyn Consulting"},"image":{"@id":"http:\/\/www.halkynconsulting.co.uk\/a\/#\/schema\/logo\/image\/"},"sameAs":["https:\/\/www.linkedin.com\/company\/2329571","https:\/\/twitter.com\/HalkynSecurity"]},{"@type":"Person","@id":"http:\/\/www.halkynconsulting.co.uk\/a\/#\/schema\/person\/3cfcd2267f12bbcce6a10159022c3df2","name":"Halkyn Security","image":{"@type":"ImageObject","inLanguage":"en-GB","@id":"http:\/\/www.halkynconsulting.co.uk\/a\/#\/schema\/person\/image\/","url":"https:\/\/secure.gravatar.com\/avatar\/4126abc936773e5e8bd38e030d54306e161190a7d6166dba7edadb6caf13b504?s=96&d=retro&r=g","contentUrl":"https:\/\/secure.gravatar.com\/avatar\/4126abc936773e5e8bd38e030d54306e161190a7d6166dba7edadb6caf13b504?s=96&d=retro&r=g","caption":"Halkyn Security"},"description":"Halkyn Security Consultants.","sameAs":["http:\/\/www.halkynconsulting.co.uk\/"],"url":"http:\/\/www.halkynconsulting.co.uk\/a\/author\/halkyn-consulting\/"}]}},"jetpack_featured_media_url":"https:\/\/i0.wp.com\/www.halkynconsulting.co.uk\/a\/wp-content\/uploads\/2014\/03\/physicalsecurityassessmentform.png?fit=800%2C1149&ssl=1","jetpack_sharing_enabled":true,"jetpack_shortlink":"https:\/\/wp.me\/p9yHvD-hr","jetpack_likes_enabled":true,"_links":{"self":[{"href":"http:\/\/www.halkynconsulting.co.uk\/a\/wp-json\/wp\/v2\/posts\/1081","targetHints":{"allow":["GET"]}}],"collection":[{"href":"http:\/\/www.halkynconsulting.co.uk\/a\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"http:\/\/www.halkynconsulting.co.uk\/a\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"http:\/\/www.halkynconsulting.co.uk\/a\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"http:\/\/www.halkynconsulting.co.uk\/a\/wp-json\/wp\/v2\/comments?post=1081"}],"version-history":[{"count":20,"href":"http:\/\/www.halkynconsulting.co.uk\/a\/wp-json\/wp\/v2\/posts\/1081\/revisions"}],"predecessor-version":[{"id":1102,"href":"http:\/\/www.halkynconsulting.co.uk\/a\/wp-json\/wp\/v2\/posts\/1081\/revisions\/1102"}],"wp:featuredmedia":[{"embeddable":true,"href":"http:\/\/www.halkynconsulting.co.uk\/a\/wp-json\/wp\/v2\/media\/1097"}],"wp:attachment":[{"href":"http:\/\/www.halkynconsulting.co.uk\/a\/wp-json\/wp\/v2\/media?parent=1081"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"http:\/\/www.halkynconsulting.co.uk\/a\/wp-json\/wp\/v2\/categories?post=1081"},{"taxonomy":"post_tag","embeddable":true,"href":"http:\/\/www.halkynconsulting.co.uk\/a\/wp-json\/wp\/v2\/tags?post=1081"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}