The suggestions made here apply to systems where security is a major concern. In this case, special treatment of support and maintenance personnel might be necessary. Follow these suggestions to the extent required by your need for security.

Onsite Support and Maintenance

For onsite support and maintenance, only trusted personnel who are authorized to access system support features should be granted physical access to the system. Before maintenance personnel are permitted to work on disk packs, evaluate the sensitivity of the information on the packs. If the data is very sensitive, you might choose to power down the packs and remove the media.

For physical security measures to be effective, support and maintenance personnel should provide suitable identification before they are granted access to the system. Limit their system access to those areas where they are authorized to work. For example, access to the secure storage area where tapes are kept might not be appropriate for support personnel.

Remote Support

For sites that need a high level of security, follow the recommendations in the Secure Use of Remote Support.