An internal committee comprised of the facilities manager, the physical security manager, the
network administrator, and a member of the executive team has been formed to address a recent
breach at a company’s data center. It was discovered that during the breach, an HVAC specialist
had gained entry to an area that contained server farms holding sensitive financial data. Although
the HVAC specialist was there to fix a legitimate issue, the investigation concluded security be
provided for the two entry and exit points for the server farm. Which of the following should be
implemented to accomplish the recommendations of the investigation?
A.
Implement a policy that all non-employees should be escorted in the data center.
B.
Place a mantrap at the points with biometric security.
C.
Hire an HVAC person for the company, eliminating the need for external HVAC people.
D.
Implement CCTV cameras at both points.