Physical security controls restrict physical access to computer resources and protect those resources from intentional or unintentional harm, loss or impairment. Such controls include guards, gates and locks, and also environmental controls such as smoke detectors, fire alarms and extinguishers, protection from water damage and uninterruptible power supplies.

Larger local governments and schools may have a server room while smaller units may place servers next to or under a desk, in a closet, in the middle of the room or other high-traffic area. You should inspect the location of computers and server areas/rooms and ensure that there are adequate physical security controls commensurate with the risks of physical damage or access.

The Information Technology Governance LGMG can be downloaded at https://www.osc.ny.gov/files/local-government/publications/pdf/information-technology-governance.pdf