Tag Info

Law enforcement do not care about your uptime. Law enforcement do not care about your losses. They want to preserve chain of custody and integrity of evidence. If your gear is seized as part of a raid, they'll take your whole machine. If you want to prosecute someone for breaking into your box, they'll demand a provably identical image of the drive, obtained ...

I think the first thing you should document, in your case, is your threat model. That is, what threats are you defending against, what risks are you worried about, what your security profile is, etc. Since you don't need big Corporate Documentation, this way would be a lot easier, to then document the mapping between the threats/risks, and the mitigation ...

If it was me I would create a spreadsheet with 2 columns in it with the first one defining the piece of security Ex. •Keypad/Security door •CCTV •Strong Firewall and in the second column back up why the items listed in the first column are considered secure. For example CCTV | The CCTV system records footage locally and also sends real time alerts to X ...