7.4 Physical security monitoring
Requires premises to be monitored continuously for unauthorised physical access. Supporting material frames this as continuous monitoring of physical security controls so that unauthorised entry and other physical securi
5
artefacts
3
held by a system
2
at each review
easy
to go live
Physical access / facilities
where the evidence lives
teal = a system already holds it · olive = produced at each review
system holds itEvidence a system already holds
- The design of physical monitoring, covering surveillance, intrusion detection, alarms and guarding, and its coverage against the areas defined · Physical access / facilities
- Evidence monitoring is continuous, including out of hours and during holidays · Physical access / facilities
- Evidence of how monitoring data is protected and retained, including privacy compliance for surveillance · Physical access / facilities
periodic reviewEvidence produced at each review
- Records of alarms and detections in the period, with the response taken and the time to respond · Physical access / facilities
- Maintenance and testing records for detection and surveillance equipment · Physical access / facilities
governing documentDocuments that govern the control
none for this control
First move
Automate the pull from your Physical access / facilities. Badge system access logs and visitor register exports; facilities maintenance tickets.
Common gaps auditors find
- Cameras installed and recording with nobody watching and no alert on anything
- Detection coverage with blind spots at exactly the low traffic entry points an intruder would use
- Alarms received at a monitoring centre with no tested response procedure or agreed response time
- Recording failures unnoticed for months because equipment health is never checked
Do this for your whole sheet
Paste the rows you run your controls from and get this mapping for every control at once, with the periodic-review ones flagged and a first move per row. No account for the first run.
Build my evidence sheet7.3 Securing offices, rooms and facilities · 7.5 Protecting against physical and environmental threats