The first step in securing data is ensuring that the equipment storing it is physically secured. U-M has a complex array of physical environments that support research, teaching and learning, clinical care, and administrative functions, all with IT systems that may contain sensitive data. Implementing proper physical security controls forestalls threats, vulnerabilities, and costs that could result from an intentional or unintentional compromise. Physical security supports personal safety as well as the safety of U-M information assets.
Any physical environment in which IT systems process or store data classified as Restricted, High, or Moderate must be in compliance with Physical Security (DS-17). All units are required to develop, document, implement, and train their faculty and staff on university-wide and unit-specific procedures necessary to comply with this standard. In addition, some regulations and contractual obligations mandate additional physical security requirements with which U-M must comply.
Not all environments require the same level of physical security. Secure a physical environment by following these steps:
- Determine physical security needs.
- Assess current physical risks.
- Secure the physical IT environment.
- Test, audit, and reassess physical security.
Report Physical IT Security Incidents
All members of the U-M community must report any serious information security incidents, including issues involving the physical security of IT systems, to the ITS Service Center within 24 hours of becoming aware of the incident.
Support and Consultation
Division of Public Safety and Security (DPSS)
- To report a non-emergency problem related to a U-M building or facility, phone DPSS at 734-763-1131. To report an emergency such as a crime in progress or fire, call 911.
- DPSS can perform a property protection security assessment for an environment. DPSS offers varying levels of assessment, including comprehensive security risk and threat assessments and consultations regarding safety and security and/or and security system construction and design.
- DPSS can ensure proper installation, operation and use of security cameras, including appropriate and legal compliance regarding issues of privacy, retention, release, and use of recorded images.
- Members of the U-M campus community can register their personal property to help deter theft and assist with the recovery of lost/stolen items.
ITS Tech Repair
ITS Tech Repair (located in Tech Shop locations) can be engaged, at a cost, to physically lock down desktop computers in your environment, such as those in a computing or research lab.
Information Assurance
Contact Information Assurance (IA) through the ITS Service Center for answers to your questions about the interpretation and implementation of Physical Security (DS-17).
Applicable University Policies
You are responsible for complying with the policies and standards below. The requirements on this page help you meet that responsibility.