Standard
Physical Security of IT Infrastructure Standard
Defines minimum physical security requirements for IT infrastructure areas under direct control of the CIO. Ensures that hardware, cabling, and IT equipment are protected from unauthorized physical access, tampering, environmental hazards, and theft. Supports the Information Security Policy and the Standard: Cloud Security Configuration Baseline (which governs logical controls). Aligns to ISO/IEC 27001:2022 Annex A.7 (Physical Controls) within IT scope.
- Type
- Standard
- Version
- 1.3.10
- Date
- 2026-10-13
- Owner
- Chief Information Officer
- Approving authority
- Governance Library Maintainer
- Classification
- Public
- Confidentiality
- Public
- Category
- Operations
- Review frequency
- Annual and upon material platform or regulatory change
- Licence
- CC BY-SA 4.0
Read the full text on GitHub (opens in a new tab)
Outline
- 1. Scope boundary
- 2. Purpose
- 3. Scope
- 4. Governance and accountability
- 5. Server room and data centre physical access
- 6. Camera surveillance and NVR systems
- 7. Environmental controls
- 8. Equipment handling
- 9. Clean desk and clear screen
- 10. Framework alignment
Frameworks it maps to
Related documents
- Information Security Policysecurity
- Network Security and Segmentation Standardoperations
- Privileged Access Management Standardsecurity
- Privacy and Data Governance Policyprivacy
Next
All Documents