These goals of easy access and security are often at odds with one another. In an academic research environment, where maximal openness and functionality is prized, this can be particularly difficult. The first step in setting up a security program is the assignment of responsibility for security to an individual or group. This body will then help craft a program which addresses the range of needs of its users, while maintaining the privacy of individuals. After this, the program for security starts with an examination of the physical security of a system.
Logical security refers to specific software systems and automated controls.
Physical security deals with physical measures such as doors, locks, sensors, and electric fences. Not only does physical security address concerns of intruders, but often it covers protection from environmental hazards such as fire, water, power supply, heat and natural disasters. A security assessment includes an examination of who has access to the systems, which could include computer terminals, servers, telecommunications equipment, printers, cameras, and other devices. Major data centers, like ours in West Virginia, house mainframes, supercomputers, enterprise servers, file and print servers, tape robots, printers, video conferencing, and network switching devices. Large installations almost always have several layers of physical security.