Separation, Put as much distance between the target and the possible attack locations as possible, this applies to both spatial and line borne attacks How can I best achieve separation?
• Identify data that is under sufficient threat of attack, identify equipment that is used to process this data include lines, mains, VDUs, printers hubs etc. • Identify possible attack locations • Reduce attack locations, carry out routine checks of empty offices, restrict parking in the vicinity of the building especially for vans etc • Where possible group your target equipment together in a location as far from the attack locations as possible Shielding, You can shield individual equipment or entire rooms/buildings, shielding is very expensive and beyond the scope of this document Filtering, Any lines attached to the equipment could be at risk therefore identify any signal/control or mains lines and filter them. Low/no cost solutions include fibre optics and UPS, there are other examples but I’ll leave that to your common sense.
