S 1.37 Adequate siting of a fax machine

Initiation responsibility: Head of Site/Bldg Technical Service, IT Security Management

Implementation responsibility: Site/Bldg Technical Service, IT users, Fax Officer

Fax machines should be installed in areas which are not freely accessible. It is advisable to monitor entry into this area and usage of the fax machine.

In this respect, it is expedient to install fax machines in rooms which are constantly occupied (e.g. office, reception room, mailroom). Outside working hours or during the absence of the authorised user, the fax machine should be locked (within the room or inside a cabinet). Here, it is important to prevent incoming fax messages from being viewed or removed by unauthorised persons (c.f. S 2.48 Designating authorised fax operators).

Additional controls:

• Who has unrestricted access to the fax machine?

• During which periods is unrestricted access possible (lunch break, shift change, etc.)?

• How is the access to the fax machine controlled?

• How is the device protected outside working hours?