Physical security is the foundational layer for all information security. If physical assets like servers are damaged, destroyed, or stolen, data loss is inevitable. Physical security includes ensuring work stations are locked, building access is secure and appropriately limited, security alarms and cameras are installed, and appropriate controls for back-up power, cooling, electrical, and fire prevention in our data centre are optimized. A major initiative prioritized and approved by the Information Technology Governance Council (ITGC) this year included the physical upgrading of the CCS data centre. This project has resulted in many important improvements to enhance its security and reliability:

• improvements to the door access system and alarms to increase security;
• automation of the alarm system to ensure alarms are enabled/disabled as appropriate; and
• enhanced video monitoring of CCS facilities.