Leak detection mechanisms should be implemented in server rooms and network closets to alert administrators on the presence of water leaks posing a threat to technological assets.
Control Type: Physical/Technical
Control Function: Detective
Water leaks are a physical security risk that can plague many organizations, especially ones whose facilities have certain structural defects, flat roofs, or geological inconveniences. Water should never touch any electrical equipment, as this runs the risk of completely ruining components or the entire device. It is best not to sit and wait around for a leak to appear, as then it might be too late. Organizations should be proactive in implementing detective measures against leaks.
There are many leak detection systems on the market that use sensors to detect the presence of abnormal water flow. Many of these systems partake in the Internet of Things (IoT), allowing them to remotely notify administration when a leak is detected. Organizations should heavily consider implementing leak detection in all server rooms/network closets, as well as any general areas storing large numbers of electronic devices.
The sophistication of said leak detection systems depends heavily on the specific organization’s budget and organizational needs. Smaller organizations may only need one or two cheap sensors that relay data to a smartphone app. Larger organizations may need more complex systems spanning dozens of rooms and sensors, managed by a dedicated device. For the best physical security, organizations should select a system whose sophistication and quality best meets the level of risk potential leaks pose to their technological assets.