DS12 Manage the physical environment

focuses on

providing and maintaining a suitable physical environment to protect IT assets from access,damage or theft

is controlled by

DS12.1 Site Selection and Layout Define and select the physical sites for IT equipment to support the technology strategy linked to the business strategy. The selection and design of the layout of a site should take into account the risk associated with natural and man-made disasters, whilst ...

DS12.2 Physical Security Measures Define and implement physical security measures in line with business requirements to secure the location and the physical assets. Physical security measures must be capable of effectively preventing, detecting and mitigating risks relating to theft, temperature, fire, smoke, water, vibration, terror, vandalism, ...

DS12.3 Physical Access Define and implement procedures to grant, limit and revoke access to premises, buildings and areas according to business needs, including emergencies. Access to premises, buildings and areas should be justified, authorised, logged and monitored. This should apply to all persons entering the ...

DS12.4 Protection Against Environmental Factor Design and implement measures for protection against environmental factors. Install specialised equipment and devices to monitor and control the environment.

DS12.5 Physical Facilities Management Manage facilities, including power and communications equipment, in line with laws and regulations, technical and business

requirements, vendor specifications, and health and safety guidelines.

is part of

Deliver and Support (DS) is concerned with the actual delivery of required services, which includes service delivery, management of security and continuity, service support for users, and management of data and operational facilities.

can be mapped to

[06.3] Service continuity and availability management Objective: To ensure that agreed service continuity and availability commitments to customers can be met in all circumstances.

[06.6] Information security management Objective: To manage information security effectively within all service activities.

supports

Account for and protect all IT assets.

Ensure minimum business impact in the event of an IT service disruption or change

Ensure that IT services and infrastructure can properly resist and recover from failures due to error, deliberate attack or disaster

Ensure that critical and confidential information is withheld from those who should not have access to it