There are physical safeguards, physical measures, policies, and procedures to protect our electronic information systems and related buildings and equipment from natural and environmental hazards, and unauthorized intrusion. The standards under physical safeguards include facility access controls, workstation use, workstation security, and device and media controls.
The entity hosting scientific use files (research entity, access facility) ensure:
- appropriate physical security of the premises of the body and its computer systems
- appropriate safekeeping of the data in computer systems (the computer on which confidential data for scientific purposes are stored is password-protected and kept in a locked room)
- appropriate safekeeping of the medium containing confidential data
- appropriate safekeeping of the results of analysis that contain confidential data.
The facilities are accredited to provide access to secure use files:
- strict access procedures for authorising access to secure use files
- check the identity of the user of secure files at any time
- access only to the authorised part of the confidential data collection
- authorise only the use of approved software
- check the work of the data user at any time
- check the output of the research analysis before releasing it outside secure access facilities
The facility providing access to secure use files (Firewall) ensures that the access point (workstation, PC or equivalent used to access confidential data for scientific purposes) is equipped with special features preventing the transmission of any kind of data outside the access facilities.
The access point is located in a locked room with access restricted to authorized persons only.
In particular, the facility providing access to secure use files prevent the user from:
- printing the data
- copying the data outside the secure environment
- connecting recording devices to the external interfaces
- connecting to internet
- installing or removing hardware or software
- booting the access point from floppy, CD-ROM, DVD-ROM or any other media