S 1.46 Use of anti-theft devices

Initiation responsibility: Head of IT Section, IT Security Management

Implementation responsibility: Head of IT Section

Anti-theft devices should be used wherever valuable items need to be protected or where other safeguards, such as appropriate control of access to the workstations, cannot be implemented. Anti-theft devices are useful in places to which the public have access or where the fluctuation of users is extremely high.

Not only the object to be protected, but also the monitor, keyboard and other accessories should be fitted with anti-theft devices.

There are now various types of anti-theft devices available on the market. On the one hand, there are anti-theft devices for hardware which protect IT equipment, for example by connecting the IT system to the desk. There are also a number of security mechanisms to prevent thieves from opening the casing and stealing components or manipulating security-related settings, for example by removing security cards.

When new IT equipment is procured, it should be ensured that it has eyes on the casing, so that it can be attached to other objects, and that the casing can be locked.

Additional Controls:

• Have IT systems or IT components been stolen within the last year?

• How are IT systems or IT components protected against theft?