Blog
Articles and resources on information security, compliance, and best practices.
ISO 27001 Control A.7.4: Physical Security Monitoring
Annex A control 7.4 requires premises to be continuously monitored for unauthorized physical access. How to choose CCTV, alarms and guarding, handle footage lawfully, and show auditors the monitoring actually works.
ISO 27001 Control A.7.5: Protecting Against Physical and Environmental Threats
Annex A control 7.5 requires protection against physical and environmental threats such as fire, flood and other natural or man-made hazards. How to assess site risks, choose proportionate safeguards and test them.
ISO 27001 Control A.7.6: Working in Secure Areas
Annex A control 7.6 requires security measures for working in secure areas to be designed and implemented. How to set rules for staff, contractors and visitors inside server rooms and other restricted spaces.
ISO 27001 Control A.7.3: Securing Offices, Rooms and Facilities
Annex A control 7.3 requires physical security to be designed and implemented for offices, rooms and facilities. How to protect individual spaces once someone is inside the perimeter.
ISO 27001 Control A.7.2: Physical Entry
Annex A control 7.2 requires appropriate entry controls and access points for secure areas. How to design entry controls, manage visitors, and keep access lists current.
ISO 27001 Control A.7.1: Physical Security Perimeters
Annex A control 7.1 requires defined perimeters around anywhere information and assets live. How to map, layer and document physical boundaries, and what auditors check.
ISO 27001 Control A.6.3: Information Security Awareness, Education and Training
Annex A control 6.3 requires staff to receive appropriate security awareness, education and training. How to build a programme that changes behaviour and evidences it for audit.
ISO 27001 Control A.6.4: Disciplinary Process
Annex A control 6.4 requires a formal, communicated disciplinary process for security violations. How to build one that is fair, lawful, and gives your other controls teeth.
ISO 27001 Control A.6.5: Responsibilities After Termination or Change of Employment
Annex A control 6.5 requires security duties that survive a role change or exit to be defined and enforced. How to run secure offboarding and what auditors check.
ISO 27001 Control A.6.6: Confidentiality or Non-Disclosure Agreements
Annex A control 6.6 requires identified, documented, reviewed and signed NDAs. What a good confidentiality agreement covers, who signs, and what auditors expect.