Physical and Environmental Security 11.1 What physical measures will be in place, to protect BBC (Description) data that is stored: At your offices/location? (Description) At the data centre? E.g. CCTV, Coded Locks, Guards. (Description) How will these controls be managed and monitored? 11.2 Where will the servers be located, which will hold the (Description) BBC data? All in the UK Some in the UK are the rest?) (Description) None in the UK (where are they?) Will the servers be held in secure Server Rooms? (Description) Will any hardware be stored outside of locked server rooms? Operations Security 12.1 Is there a documented standard procedure followed, for (Yes/No and Description) building and hardening host machines? 12.2 Are these procedures periodically reviewed and kept in (Yes/No) line with current best practice? 12.3 Please outline your planned approach, to security (Description) patching of operating systems and applications that form part of the system. (Yes/No) Please confirm, that critical and important security patches will be up to date. 12.4 Please outline any anti-malware (antivirus, etc.) tools, (Description) that will be used to protect the system. 12.5 What firewalls and network/host protection (Description) measures, (e.g. IDS or IPS) will be in to protect BBC data? (Description) Describe how you will configure, maintain the above and monitor alerts generated. 12.6 Will the application collect, and/or host, any User (Yes/No) Generated Content (UGC)? If so – describe the UGC in detail and explain what (Description) moderation approach will be applied?
Physical and Environmental Security 11.1 What physical measures will be in place, to protect BBC data that is stored: At your offices/location? At the data centre? E.g. CCTV, Coded Locks, Guards. How will these controls be managed and monitored? (Description) (Description) (Description) 11.2 Where will the servers be located, which will hold the BBC data? All in the UK Some in the UK are the rest?) None in the UK (where are they?) Will the servers be held in secure Server Rooms? Will any hardware be stored outside of locked server rooms? (Description) (Description) (Description) Operations Security 12.1 Is there a documented standard procedure followed, for building and hardening host machines? (Yes/No and Description) 12.2 Are these procedures periodically reviewed and kept in line with current best practice? (Yes/No) 12.3 Please outline your planned approach, to security patching of operating systems and applications that form part of the system. Please confirm, that critical and important security patches will be up to date. (Description) (Yes/No) 12.4 Please outline any anti-malware (antivirus, etc.) tools, that will be used to protect the system. (Description) 12.5 What firewalls and network/host protection measures, (e.g. IDS or IPS) will be in to protect BBC data? Describe how you will configure, maintain the above and monitor alerts generated. (Description) (Description) 12.6 Will the application collect, and/or host, any User Generated Content (UGC)? If so – describe the UGC in detail and explain what moderation approach will be applied? (Yes/No) (Description)
BBC_ISGC_Holding_Hosting_Form_v5_20140422.docx