physical security
All tags →8 articles tagged "physical security".
ISO 27001 Control A.7.7: Clear Desk and Clear Screen
Annex A control 7.7 requires clear desk and clear screen rules to be defined and enforced. How to set practical rules for paper, removable media and unattended screens.
ISO 27001 Control A.7.8: Equipment Siting and Protection
Annex A control 7.8 requires equipment to be sited securely and protected. How to place servers, screens and devices to cut environmental, access and eavesdropping risks.
ISO 27001 Control A.7.4: Physical Security Monitoring
Annex A control 7.4 requires premises to be continuously monitored for unauthorized physical access. How to choose CCTV, alarms and guarding, handle footage lawfully, and show auditors the monitoring actually works.
ISO 27001 Control A.7.5: Protecting Against Physical and Environmental Threats
Annex A control 7.5 requires protection against physical and environmental threats such as fire, flood and other natural or man-made hazards. How to assess site risks, choose proportionate safeguards and test them.
ISO 27001 Control A.7.6: Working in Secure Areas
Annex A control 7.6 requires security measures for working in secure areas to be designed and implemented. How to set rules for staff, contractors and visitors inside server rooms and other restricted spaces.
ISO 27001 Control A.7.3: Securing Offices, Rooms and Facilities
Annex A control 7.3 requires physical security to be designed and implemented for offices, rooms and facilities. How to protect individual spaces once someone is inside the perimeter.
ISO 27001 Control A.7.2: Physical Entry
Annex A control 7.2 requires appropriate entry controls and access points for secure areas. How to design entry controls, manage visitors, and keep access lists current.
ISO 27001 Control A.7.1: Physical Security Perimeters
Annex A control 7.1 requires defined perimeters around anywhere information and assets live. How to map, layer and document physical boundaries, and what auditors check.