Cyber security tips: Physical security

Physical security is an important part of cyber security. Bad actors can locate physical files disposed of or stored improperly in easily accessible locations, garbage cans, dumpsters, or even copy machines or other devices no longer in use.

To keep university data secure, take the following steps:

• Ensure only authorized personnel access secure locations:
  • BPPM 50.23 Building Security and Hours
  • BPPM 50.25 Keys to University Rooms and Buildings
• Ensure doors to secure locations are not propped open
• Keep up-to-date records of all key cards and physical keys issued
• Ensure separated employees return keys and all access to data is removed
• Ensure sensitive documents and external drives are stored in locked cabinets when not in use
• Be sure to remove sensitive information from shared meeting rooms, fax machines, printers, etc.
• Shred or hire shredding services for all sensitive documents when no longer needed in accordance with:
  • BPPM 90.01 University Records – Retention and Disposition
  • Send confidential shredding requests to WSU Waste Management at waste.management@wsu.edu

If you discover that physical security or physical records have been compromised or stolen, contact the local/campus police department right away.

Questions? Contact:

• IT Security at abuse@wsu.edu
• Internal Audit at ia.central@wsu.edu
• Finance and Administration at VPFA@wsu.edu
• Risk Management at riskmanagement@wsu.edu