Scribd
Upload
5 views4 pages

Physical Control

The document outlines various physical security measures and controls, including secure areas, entry controls, monitoring systems, and protection against environmental threats. It emphasizes the need for evidence such as access control systems, visitor logs, and maintenance records to demonstrate compliance. Additionally, it highlights opportunities for improvement, such as using GPS-enabled labeling for drill photos.

Uploaded by

pratheek.h.s.gowda7
Copyright
© All Rights Reserved
We take content rights seriously. If you suspect this is your content, claim it here.
Available Formats
Download as DOCX, PDF, TXT or read online on Scribd
5 views4 pages

Physical Control

The document outlines various physical security measures and controls, including secure areas, entry controls, monitoring systems, and protection against environmental threats. It emphasizes the need for evidence such as access control systems, visitor logs, and maintenance records to demonstrate compliance. Additionally, it highlights opportunities for improvement, such as using GPS-enabled labeling for drill photos.

Uploaded by

pratheek.h.s.gowda7
Copyright
© All Rights Reserved
We take content rights seriously. If you suspect this is your content, claim it here.
Available Formats
Download as DOCX, PDF, TXT or read online on Scribd

🔹 A.7.

1 – Physical Security Perimeter

 Do you have defined secure areas (office, server room)?

 How do you restrict unauthorized access?

 Is there any access control (badge, biometric)?

👉 Evidence:

 Access control system

 Office layout / restricted area list

🔹 A.7.2 – Physical Entry Controls

 How do employees enter the office?

 How do visitors enter?

 Is there a visitor register?

 Are visitors escorted?

👉 Evidence:

 Visitor logs

 Entry system records

🔹 A.7.3 – Securing Offices, Rooms & Facilities

 Are sensitive areas (server rooms) locked?

 Are there CCTV cameras?

 Is physical security monitored?

👉 Evidence:

 CCTV records

 Photos / system logs

🔹 A.7.4 – Physical Security Monitoring

 Is CCTV monitoring in place?

 How long are the recordings retained?

 Who is responsible for monitoring CCTV?


 Do you maintain backups of CCTV recordings in case of any
incident?

🔹 A.7.5 – Protection Against Physical & Environmental Threats

 Do you have fire protection systems in place?

 Is there protection against power failure (e.g., UPS,


generator)?

 Are there controls for environmental risks (flood, heat,


etc.)?

 Have you conducted any recent emergency drills (fire drill,


evacuation)?

👉 Provide evidence:

 Drill report

 Attendance records

 Photos of the drill

👉 OFI (Opportunity for Improvement):


It is recommended to use GPS-enabled labeling while capturing
drill photos for better traceability and evidence.

🔹 A.7.6 – Working in Secure Areas

 Are there rules for working in secure areas?

 Are unauthorized devices restricted?

👉 Evidence:

 Policy document

 Employee awareness

🔹 A.7.7 – Clear Desk & Clear Screen

 Do employees follow clean desk policy?

 Are screens locked when not in use?

👉 Evidence:

 Policy
 Observation / screenshots

🔹 A.7.8 – Equipment Siting & Protection

 Are systems placed securely?

 Are devices protected from theft or damage?

👉 Evidence:

 Office setup

 Device protection measures

🔹 A.7.9 – Security of Assets Off-Premises

 Do employees take laptops outside?

 How are devices secured outside office?

👉 Evidence:

 Policy

 Asset tracking

🔹 A.7.10 – Storage Media

 How are USBs or external drives controlled?

 Is usage restricted?

👉 Evidence:

 Policy

 System controls

🔹 A.7.11 – Supporting Utilities

 Do you have backup power (UPS)?

 Is internet/network reliable and protected?

👉 Evidence:

 UPS records

 Network setup
🔹 A.7.12 – Cabling Security

 Are network and power cables properly secured?

 Is there a dedicated cable room or organized cabling setup?

 Kindly show the cable room / cabling arrangement

 Is there any risk of tampering or unauthorized access?

👉 Evidence:

 Physical inspection

🔹 A.7.13 – Equipment Maintenance

 Are systems regularly maintained?

 Do you have maintenance records?

👉 Evidence:

 AMC records

 Maintenance logs

🔹 A.7.14 – Secure Disposal or Reuse

 How do you dispose old systems?

 Is data wiped before disposal?

👉 Evidence:

 Disposal records

 Data wiping proof

You might also like