FIPS PUB 31 : 0

Action Summary
1. Introduction
    1.1 Scope
    1.2 Threat to ADP Operations
    1.3 Risk Analysis
        1.3.1 Loss Potential Estimate
        1.3.2 Threat Analysis
        1.3.3 Annual Loss Expectancy
        1.3.4 Selecting Remedial Measures
    1.4 Implementing the Security Program
    1.5 Supporting Documents
2. Anticipating Natural Disasters
    2.0 Introduction
    2.1 Fire Safety
        2.1.1 ADP Facility Fire Exposure
        2.1.2 Fire Detection
        2.1.3 Fire Extinguishment
        2.1.4 Fire Fighting
    2.2 Flood
    2.3 Earthquake
    2.4 Windstorms
3. Supporting Utilities
    3.0 Introduction
    3.1 Electric Power
    3.2 Air Conditioning
    3.3 Communication Circuit
    3.4 Other Supporting Utilities
4. Computer System Reliability
    4.0 Introduction
    4.1 Computer System Reliability
    4.2 Management of Hardware Maintenance
    4.3 Reliability Considerations for New Systems
5. Physical Protection of ADP Facilities
    5.0 Introduction
    5.1 Determining Protection Requirements
        5.1.1 Instructions for the Facility Physical Security
              Survey
    5.2 Boundary Protection
        5.2.1 Emanations
    5.3 Entrance Door Controls
    5.4 Perimeter Intrusion Controls
    5.5 Critical Area Controls
    5.6 Guard Force Operations
    5.7 Integrating Physical Security Measures
6. Internal Controls
    6.0 Introduction
    6.1 Personnel Controls
        6.1.1 Personnel Selection
        6.1.2 Training
        6.1.3 Supervision
    6.2 Organizing for Internal Control
    6.3 Data Controls
    6.4 Data Retention and Back-up
        6.4.1 Short Term Back-up
        6.4.2 Long Term Back-up
    6.5 Programming Controls
        6.5.1 Program Design
        6.5.2 Program Installation
        6.5.3 Documentation of Controls
7. Security of Off-Site ADP Facilities
    7.0 Introduction
    7.1 Analysis of security Requirements
    7.2 On-Site Security
    7.3 In-Transit Security
    7.4 Off-Site Security
8. Contingency Planning
    8.0 Introduction
    8.1 Preparation of Contingency Plans
    8.2 Emergency Response Planning
    8.3 Back-up Operations Planning
    8.4 Recovery Planning
    8.5 Testing Contingency Plans
9. Security Awareness and Communications
    9.0 Introduction
    9.1 Senior Management
    9.2 Communicating the Security Program
        9.2.1 Target Audiences for the ADP Security Plan
        9.2.2 Content of Communication Plan
        9.2.3 Method of Communication
    9.3 Summary
10. Internal Audit of Physical Security
    10.0 Introduction
    10.1 Audit Preparation
    10.2 The Audit Plan
    10.3 Conducting the Audit
    10.4 Follow-up
Appendices
A. Glossary
B. Bibliography
C. Sample Table of Content of Programming Procedures
Index

Deals with the threats to ADP property and capital equipment and the physical hazards to continuing operations.