S 1.16 Selection of a suitable site

Initiation responsibility: Top Management

Implementation responsibility: Planner

When selecting and planning the site where a building is to be rented or constructed, it is recommended to consider the environmental factors with an influence on IT security in addition to the normal aspects such as space requirements and cost:

• Due to structural weaknesses, IT systems may be affected by shock/vibration stemming from nearby traffic routes (road traffic, railway, underground railway).
• Buildings located directly on primary routes (railway, motorway, trunk road, airport) can be damaged as a result of traffic accidents.
• Proximity to optimum traffic routes, and thus escape routes, can facilitate the imposition of attacks.
• In the vicinity of transmitter installations, IT installations can be subject to disruption.
• In the vicinity of water bodies and in low plains, flooding is a probability.
• In the vicinity of power plants or factories, accidents or operating troubles (explosion, release of hazardous material) can lead to impaired availability of the building (e.g. by evacuation or the cordoning-off of large areas).

It may also be possible to compensate threats occurring nearby, for example, by a suitable layout of building parts requiring protection. This should be taken into account when selecting and planning the site.

The threats caused by the site and the required safeguards to prevent or to reduce damage should be documented in the security concept. In addition, they should be reflected in the contingency concept.

Review questions:

• Is there an overview of the threats caused by the site?
• Are such threats counteracted by means of additional compensating safeguards?