Free ebook: NIS2 ready using ISO 27001 best practices
Download ebook

Notification process in case of loss of physical identifiers

Critical
High
Normal
Low

Staff have instructions and tools to help them report a lost physical identifier (e.g. keychain, smart card, smart sticker).

Connected other frameworks and requirements:
11.1.2: Physical entry controls
ISO 27001
7.2: Physical entry
ISO 27001

Physical access control to building, offices and other premises

Critical
High
Normal
Low

Secure areas of the organization cannot be accessed unnoticed. The premises are protected by appropriate access control. Only authorized persons have access to the secure areas.

Connected other frameworks and requirements:
F04: Kulkuoikeuksien hallinta
11.1.2: Physical entry controls
ISO 27001
11.1.1: Physical security perimeter
ISO 27001
PR.AC-2: Physical access control
NIST CSF
DE.CM-2: The physical environment monitoring
NIST CSF

Visitor instructions and log

Critical
High
Normal
Low

Visitors shall have access to secure areas only with permission, after they are appropriately identified and their access rights shall be limited to the necessary facilities. All visits are recorded in the visitor log. In addition, staff have guidelines about safe operating in connection with visits.

Connected other frameworks and requirements:
F04: Kulkuoikeuksien hallinta
11.1.2: Physical entry controls
ISO 27001
PR.AC-2: Physical access control
NIST CSF
7.2: Physical entry
ISO 27001

Using keys and other IDs that produce electronic movement log

Critical
High
Normal
Low

It is not possible to move around the premises without tags that record the person's movements in an electronic logbook.

Connected other frameworks and requirements:
11.1.2: Physical entry controls
ISO 27001
7.2: Physical entry
ISO 27001

Using visible IDs

Critical
High
Normal
Low

People can't move around the organization's premises without a visible identifier.

Connected other frameworks and requirements:
11.1.2: Physical entry controls
ISO 27001
11.1.6: Delivery and loading areas
ISO 27001
7.2: Physical entry
ISO 27001

Limited access and monitoring of support staff

Critical
High
Normal
Low

External support staff, such as maintenance or cleaning staff, will only be granted access to the necessary security areas and confidential data processing services they need. Access rights for external support staff are reviewed regularly.

Connected other frameworks and requirements:
11.1.2: Physical entry controls
ISO 27001
F04: Kulkuoikeuksien hallinta
7.2: Physical entry
ISO 27001
No items found.