The Physical Security domain is focused on identifying and implementing physical security, controls and building construction measures that provide safety to Tasmanian Government resources, our information, people and assets. This domain assists your agency to identify and minimise, or remove, security risks.

Required outcome

Each agency provides a safe and secure physical environment for their information, people and assets.

To assist agencies to achieve this security outcome, Tasmania’s Protective Security Policy Framework (TAS-PSPF) includes 2 Physical Security (PHYSEC) core requirements, supported by a varying number of supplementary requirements and a guiding policy for each. These requirements cover how agencies must secure their physical environments for the protection of their people, information and assets.

Physical Security policies

PHYSEC-1: Protecting assets

Context

Agencies must identify and mitigate risks to information, people and assets through best practice physical security measures. Protecting resources with physical security measures should be proportionate to the threat and identified risks.

Core requirement

The Accountable Authority must identify and implement appropriate physical security measures to mitigate the risk of harm or compromise to its information, people and assets.

Policy guidance

PHYSEC-2: Agency facilities

Context

Access to Tasmanian Government assets by unintended or unauthorised people places these assets, and those accessing them, at significant risk. Early identification and adoption of physical security measures through separation and isolation of information, people and assets is critical in the planning, design, selection, development and modification of agency facilities.

Core requirement

The Accountable Authority must consider physical security measures and ensure they are adopted and integrated in any proposed facility design, selection, development or modification.

Policy guidance