Physical Security

Table of Contents

Governing UH Policy

• MAPPs
• SAMs

IT Practices and Guidelines

Governing UH Policy

Manual of Administrative Policies and Procedures (MAPP):

Computer User Responsibilities

MAPP Policy:	10.03.01
SECTION:	Information Technology
AREA:	User Guidelines and Responsibilities; Security
SUBSECTION:	IV (Security Responsibilities)

Computer Security

MAPP Policy:	10.03.02
SECTION:	Information Technology
AREA:	User Guidelines and Responsibilities; Security
SUBSECTION:	IV (Security Responsibilities)

Connecting Devices to University Communication Networks

MAPP Policy:	10.03.04
SECTION:	Information Technology
AREA:	User Guidelines and Responsibilities; Security

Property Management Tag information

MAPP Policy:	03.03.03
SECTION:	Administrative Operations
AREA:	Property Management
SUBSECTION:	VI (TAGS) and VII (How Equipment is Tagged)

Proper Maintenance (Property Management)

MAPP Policy:	03.03.03
SECTION:	Administrative Operations
AREA:	Property Management
SUBSECTION:	IX (Maintenance)

University of Houston System, System Administrative Memoranda (SAM):

Notification of Automated System Security Guidelines

SAM Number:	07.A.03
SECTION:	Information Technology
AREA:	Computing Services

 

IT Practices and Guidelines

• Register all University computers with property management. Make sure that ALL University-owned computers have a University of Houston property tag prominently affixed to the case. (See MAPP Policy 03.03.03, SUBSECTIONS VI and VII)
• There must not be an inordinate amount of combustible material (e.g. paper) stored in the same room as the computer system.
• Equipment should be properly maintained according to manufacturer's guidelines. (See MAPP Policy 03.03.03, SUBSECTION IX)
• Air temperature and humidity in computer rooms must be kept within the manufacturer's parameters.
• Equipment located in publicly accessible areas or rooms that cannot be locked should be fastened down by a cable lock system or enclosed in a lockable computer equipment unit or case.
• Store critical data backup media in fireproof vaults or in another building. (See MAPP Policy: 10.03.01, SUBSECTION IV, item H)
• Secure hard disks. External hard disks should be secured against access, tampering, or removal.
• There must be procedures in place to assure that only authorized staff enters the premises.
• When computing equipment is powered via an Uninterruptible Power Supply (UPS), it should provide the following:
  • Minimum of 15 minutes operation in the event of a power blackout.
  • Adequate protection from surges, spikes and brown-outs.
  • Trigger an orderly system shutdown when deemed necessary.