Free ebook: NIS2 ready using ISO 27001 best practices
Download ebook

Safe placement of equipment

Critical
High
Normal
Low

For example, data processing equipment, as well as other important equipment, should be placed in the premises safely and with consideration. Placement should restrict unauthorized access to devices.

Connected other frameworks and requirements:
Toiminnan jatkuvuuden hallinta
F08: Toiminnan jatkuvuuden varmistaminen
11.1.3: Securing offices, rooms and facilities
ISO 27001
11.2.1: Equipment siting and protection
ISO 27001
11.1.4: Protecting against external and environmental threats
ISO 27001

Basic service testing, fault tolerance evaluation and verification

Critical
High
Normal
Low

The operation of basic services (such as electricity, telecommunications, water supply, sewerage, heating, ventilation and air conditioning) will be monitored to ensure that their capacity covers business growth.

Connected other frameworks and requirements:
11.1.4: Protecting against external and environmental threats
ISO 27001
11.2.2: Supporting utilities
ISO 27001
Toiminnan jatkuvuuden hallinta
F08: Toiminnan jatkuvuuden varmistaminen
PR.IP-5: Physical operating environment
NIST CSF

Use of surge protectors and uninterruptible power supplies (UPS)

Critical
High
Normal
Low

Surge protectors prevent current level rises and falls from damaging the equipment. Uninterruptible power supplies (UPS), on the other hand, guarantee a limited amount of battery power, which allows you to work even during short power outages. Critical equipment is held in connection to a UPS.

Connected other frameworks and requirements:
Toiminnan jatkuvuuden hallinta
F08: Toiminnan jatkuvuuden varmistaminen
11.2.2: Supporting utilities
ISO 27001
PR.IP-5: Physical operating environment
NIST CSF
7.11: Supporting utilities
ISO 27001

Alarm systems for equipment environment

Critical
High
Normal
Low

Alarm systems are used to monitor the level of key environmental conditions (eg temperature and humidity) that may adversely affect the operation of data processing equipment.

Connected other frameworks and requirements:
Toiminnan jatkuvuuden hallinta
F08: Toiminnan jatkuvuuden varmistaminen
11.2.1: Equipment siting and protection
ISO 27001
11.2.2: Supporting utilities
ISO 27001
PR.IP-5: Physical operating environment
NIST CSF
No items found.