Bpp learning Media is an acca approved Content Provider

natural world
. 
Security can be subdivided into a number of aspects. 
(a) 
Prevention
. 
It is in practice impossible to prevent all threats cost effectively. 
(b) 
Detection
. Detection techniques are often combined with prevention techniques: a log can be 
maintained of unauthorised attempts to gain access to a computer system. 
(c) 
Deterrence
. 
As an example, computer misuse by personnel can be made grounds for disciplinary 
action. 
(d) 
Recovery procedures
.
If the threat occurs, its consequences can be contained (for example 
checkpoint programs). 
(e) 
Correction procedures
. 
These ensure the vulnerability is dealt with (for example, by instituting 
stricter controls). 
(f) 
Threat avoidance
. This might mean changing the design of the system. 
BPP Tutor Toolkit Copy

---

CHAPTER 9
//
CONTROL, SECURITY AND AUDIT 
 
251 
5.2 Physical threats 
Physical threats 
to security may be natural or man made. They include fire, flooding, weather, lightning, 
terrorist activity and accidental damage. 
The 
physical environment 
quite obviously has a major effect on information system security, and so 
planning it properly is an important precondition of an adequate security plan. 
5.2.1 Fire 
Fire is the 
most serious hazard 
to computer systems. Destruction of data can be even more costly than 
the destruction of hardware.
A fire safety plan is an essential feature of security procedures in order to prevent fire, detect fire and put 
out the fire.
5.2.2 Water 
Water is a serious hazard. Flooding and water damage are often encountered following firefighting 
activities elsewhere in a building.
This problem can be countered by the use of waterproof ceilings and floors together with the provision of 
adequate drainage. 
5.2.3 Weather 
Wind, rain and storms can all cause substantial