Control 7.1
Physical security perimeters
Define and protect physical boundaries around information, people and supporting assets according to risk.
Read the full guide →Annex A category 7
Protection of locations, equipment, media and physical working environments. Use this category page to understand the control family and move into detailed implementation guides.
Physical controls provide a structured reference for risk treatment. Applicability follows the organization’s risks, obligations, scope and chosen treatment. Record decisions in the Statement of Applicability and test selected controls in operation.
Use these guides to move from category-level planning into control-specific implementation, evidence and audit testing. The interactive lookup remains available for quick cross-control reference.
Control 7.1
Define and protect physical boundaries around information, people and supporting assets according to risk.
Read the full guide →Control 7.2
Authorize, record and review entry to controlled areas while managing visitors and access credentials.
Read the full guide →Control 7.3
Apply proportionate protection to workplaces and facilities, including shared and outsourced locations.
Read the full guide →Control 7.4
Detect and review unauthorized or suspicious physical activity using proportionate monitoring and response.
Read the full guide →Control 7.5
Reduce harm from fire, water, temperature, power, civil disruption and other relevant environmental hazards.
Read the full guide →Control 7.6
Set behaviour and supervision expectations for people working within sensitive physical areas.
Read the full guide →Control 7.7
Reduce accidental exposure of sensitive information in offices, shared spaces and remote-work environments.
Read the full guide →Control 7.8
Position and protect equipment against unauthorized access, observation, damage and environmental exposure.
Read the full guide →Control 7.9
Protect devices, media and information when used, transported or stored outside organizational premises.
Read the full guide →Control 7.10
Control removable and other storage media through authorization, handling, transport, reuse and disposal.
Read the full guide →Control 7.11
Protect information-processing facilities from loss or instability of power, cooling, communications and other utilities.
Read the full guide →Control 7.12
Protect power and communications cabling from interception, interference and damage.
Read the full guide →Control 7.13
Maintain equipment safely and reliably while controlling access, information exposure and service records.
Read the full guide →Control 7.14
Remove or protect information before equipment is disposed of, returned, reassigned or reused.
Read the full guide →Browse the complete category. Each control opens a dedicated implementation guide and remains available in the free interactive lookup.
Control 7.1
Control 7.2
Control 7.3
Control 7.4
Control 7.5
Control 7.6
Control 7.7
Control 7.8
Control 7.9
Control 7.10
Control 7.11
Control 7.12
Control 7.13
Control 7.14