Ensuring Physical Security

One aspect of security that is often forgotten is protecting the physical pieces related to your servers. This includes restricting access to the room containing your servers to only those essential people who need access. Rememberif someone has physical access to the hardware, that person has access to everything stored on that machine, no matter what software settings are in place.

A related item that also needs to be protected is any backup copy that you make of the mail data. It makes sense to store any backup media offsite to remain safe during a fire or other disaster. Remember, though, that all of your users' confidential data is stored on those backups, and so they should be treated with the same high level of physical protection that you establish for the server itself.