{"id":5116,"date":"2023-01-16T09:15:37","date_gmt":"2023-01-16T09:15:37","guid":{"rendered":"https:\/\/www.imsm.com\/south-africa\/?p=5116"},"modified":"2023-11-07T14:45:17","modified_gmt":"2023-11-07T14:45:17","slug":"does-iso-27001-cover-physical-security","status":"publish","type":"post","link":"https:\/\/www.imsm.com\/south-africa\/news\/does-iso-27001-cover-physical-security\/","title":{"rendered":"Does ISO 27001 cover physical security?"},"content":{"rendered":"<h2><span class=\"TextRun SCXW104553360 BCX8\" lang=\"EN-GB\" xml:lang=\"EN-GB\" data-contrast=\"auto\"><span class=\"NormalTextRun SCXW104553360 BCX8\">What is ISO<\/span><span class=\"NormalTextRun SCXW104553360 BCX8\">\/IEC<\/span><span class=\"NormalTextRun SCXW104553360 BCX8\"> 27001?<\/span><\/span><span class=\"EOP SCXW104553360 BCX8\" data-ccp-props=\"{&quot;201341983&quot;:0,&quot;335559739&quot;:160,&quot;335559740&quot;:259}\">\u00a0<\/span><\/h2>\n<p><a href=\"https:\/\/www.imsm.com\/south-africa\/iso-27001\/\"><span data-contrast=\"none\">ISO\/IEC 27001<\/span><\/a><span data-contrast=\"auto\"> is the international standard for maintaining an Information Security Management System (ISMS). Implementing an ISMS is essential for any business that aims to be securely protected against security risks or data breaches.\u00a0<\/span><span data-ccp-props=\"{&quot;201341983&quot;:0,&quot;335559739&quot;:160,&quot;335559740&quot;:259}\">\u00a0<\/span><\/p>\n<p><span data-contrast=\"auto\"><a href=\"https:\/\/www.imsm.com\/south-africa\/iso-27001\/\">ISO\/IEC 27001<\/a> will enable your business to keep its information and data, whether it\u2019s customer, staff, or supplier data, secure from potential threats.<\/span><span data-ccp-props=\"{&quot;201341983&quot;:0,&quot;335559739&quot;:160,&quot;335559740&quot;:259}\">\u00a0<\/span><\/p>\n<p><span data-contrast=\"auto\">These potential threats can include the following:<\/span><span data-ccp-props=\"{&quot;201341983&quot;:0,&quot;335559739&quot;:160,&quot;335559740&quot;:259}\">\u00a0<\/span><\/p>\n<ul>\n<li><span data-contrast=\"auto\">Intellectual property theft<\/span><span data-ccp-props=\"{&quot;201341983&quot;:0,&quot;335559739&quot;:160,&quot;335559740&quot;:259}\">\u00a0<\/span><\/li>\n<li><span data-contrast=\"auto\">Identity theft<\/span><span data-ccp-props=\"{&quot;201341983&quot;:0,&quot;335559739&quot;:160,&quot;335559740&quot;:259}\">\u00a0<\/span><\/li>\n<li><span data-contrast=\"auto\">Information extortion<\/span><span data-ccp-props=\"{&quot;201341983&quot;:0,&quot;335559739&quot;:160,&quot;335559740&quot;:259}\">\u00a0<\/span><\/li>\n<li><span data-contrast=\"auto\">Equipment or information theft<\/span><span data-ccp-props=\"{&quot;201341983&quot;:0,&quot;335559739&quot;:160,&quot;335559740&quot;:259}\">\u00a0<\/span><\/li>\n<li><span data-contrast=\"auto\">Sabotage and hacking<\/span><span data-ccp-props=\"{&quot;201341983&quot;:0,&quot;335559739&quot;:160,&quot;335559740&quot;:259}\">\u00a0<\/span><\/li>\n<li><span data-contrast=\"auto\">Viruses, worms, phishing attacks and trojan horses<\/span><span data-ccp-props=\"{&quot;201341983&quot;:0,&quot;335559739&quot;:160,&quot;335559740&quot;:259}\">\u00a0<\/span><\/li>\n<\/ul>\n<p><span data-contrast=\"auto\">The <a href=\"https:\/\/www.imsm.com\/south-africa\/iso-27001\/\">ISO\/IEC 27001<\/a> standard aims to reduce the probability of possible threats occurring in your business. Processes will be implemented according to <a href=\"https:\/\/www.imsm.com\/south-africa\/iso-27001\/\">ISO\/IEC 27001<\/a>, allowing your organisation to identify hazards and take corrective actions to prevent them.<\/span><span data-ccp-props=\"{&quot;201341983&quot;:0,&quot;335559739&quot;:160,&quot;335559740&quot;:259}\">\u00a0<\/span><\/p>\n<h2><span class=\"TextRun SCXW88870870 BCX8\" lang=\"EN-GB\" xml:lang=\"EN-GB\" data-contrast=\"auto\"><span class=\"NormalTextRun SCXW88870870 BCX8\">What do we mean by physical and environmental security?<\/span><\/span><span class=\"EOP SCXW88870870 BCX8\" data-ccp-props=\"{&quot;201341983&quot;:0,&quot;335559739&quot;:160,&quot;335559740&quot;:259}\">\u00a0<\/span><\/h2>\n<p><span data-contrast=\"auto\">Physical and environmental security refers to your organisation\u2019s precautions to prevent physical threats. Your organisation must be protected from any danger that could happen, no matter how big or small.<\/span><span data-ccp-props=\"{&quot;201341983&quot;:0,&quot;335551550&quot;:6,&quot;335551620&quot;:6,&quot;335559739&quot;:160,&quot;335559740&quot;:259}\">\u00a0<\/span><\/p>\n<p><span data-contrast=\"auto\">Threats directed at your organisation from your physical environment can cause irreversible reputational damage and harm the safety of your clients, customers, staff, and suppliers.\u00a0<\/span><span data-ccp-props=\"{&quot;201341983&quot;:0,&quot;335551550&quot;:6,&quot;335551620&quot;:6,&quot;335559739&quot;:160,&quot;335559740&quot;:259}\">\u00a0<\/span><\/p>\n<p><span class=\"TextRun SCXW27158865 BCX8\" lang=\"EN-GB\" xml:lang=\"EN-GB\" data-contrast=\"auto\"><span class=\"NormalTextRun SCXW27158865 BCX8\">Physical threats can include:<\/span><\/span><span class=\"EOP SCXW27158865 BCX8\" data-ccp-props=\"{&quot;201341983&quot;:0,&quot;335551550&quot;:6,&quot;335551620&quot;:6,&quot;335559739&quot;:160,&quot;335559740&quot;:259}\">\u00a0<\/span><\/p>\n<ul>\n<li><span data-contrast=\"auto\">Intentional destruction directed towards your organisation, or a specific person<\/span><span data-ccp-props=\"{&quot;201341983&quot;:0,&quot;335559739&quot;:160,&quot;335559740&quot;:259}\">\u00a0<\/span><\/li>\n<li><span data-contrast=\"auto\">Unintentional destruction<\/span><\/li>\n<li><span data-contrast=\"auto\">Hardware failures from accidents or deliberate tampering<\/span><span data-ccp-props=\"{&quot;201341983&quot;:0,&quot;335559739&quot;:160,&quot;335559740&quot;:259}\">\u00a0<\/span><\/li>\n<li><span data-contrast=\"auto\">Power failures<\/span><span data-ccp-props=\"{&quot;201341983&quot;:0,&quot;335559739&quot;:160,&quot;335559740&quot;:259}\">\u00a0<\/span><\/li>\n<\/ul>\n<p><span data-contrast=\"auto\"><a href=\"https:\/\/www.imsm.com\/south-africa\/iso-27001\/\">ISO\/IEC 27001<\/a> enables your organisation to look within its physical environment and understand where there are potential non-conformities within your company. With <a href=\"https:\/\/www.imsm.com\/south-africa\/iso-27001\/\">ISO\/IEC 27001\u2019s<\/a> policies, your organisation can improve and build upon the current framework you already have to establish a system with minimised flaws.<\/span><span data-ccp-props=\"{&quot;201341983&quot;:0,&quot;335551550&quot;:6,&quot;335551620&quot;:6,&quot;335559739&quot;:160,&quot;335559740&quot;:259}\">\u00a0<\/span><\/p>\n<p><span data-contrast=\"auto\">An example would be implementing a policy in which data is double-checked and stored in a location where select authorised individuals can access it. Preventative actions and strategies are in place for those who do not have access to this data to minimise the probability of threats.<\/span><span data-ccp-props=\"{&quot;201341983&quot;:0,&quot;335551550&quot;:6,&quot;335551620&quot;:6,&quot;335559739&quot;:160,&quot;335559740&quot;:259}\">\u00a0<\/span><\/p>\n<figure class=\"u-TextAlignNone\"><\/figure>\n<figure class=\"u-TextAlignNone\"><\/figure>\n<figure class=\"u-TextAlignLeft\"><\/figure>\n<h2><span class=\"TextRun SCXW16044608 BCX8\" lang=\"EN-GB\" xml:lang=\"EN-GB\" data-contrast=\"auto\"><span class=\"NormalTextRun SCXW16044608 BCX8\">Why is physical and environmental security essential for business protection?<\/span><\/span><span class=\"EOP SCXW16044608 BCX8\" data-ccp-props=\"{&quot;201341983&quot;:0,&quot;335559739&quot;:160,&quot;335559740&quot;:259}\">\u00a0<\/span><\/h2>\n<p><span data-contrast=\"auto\">Having a security management system in place against any physical or environmental threat is critical for maintaining good business practices regarding data and information security.<\/span><span data-ccp-props=\"{&quot;201341983&quot;:0,&quot;335551550&quot;:6,&quot;335551620&quot;:6,&quot;335559739&quot;:160,&quot;335559740&quot;:259}\">\u00a0<\/span><\/p>\n<p><span data-contrast=\"auto\">Suppose an unknown source hacks into your systems or physically gains access to your devices and software. In that case, all data and information stored on that device will become available for them to use or sabotage.\u00a0<\/span><span data-ccp-props=\"{&quot;201341983&quot;:0,&quot;335551550&quot;:6,&quot;335551620&quot;:6,&quot;335559739&quot;:160,&quot;335559740&quot;:259}\">\u00a0<\/span><\/p>\n<p><span data-contrast=\"auto\">Environmental and physical threats can occur within any business that uses and stores data or information.\u00a0<\/span><span data-ccp-props=\"{&quot;201341983&quot;:0,&quot;335551550&quot;:6,&quot;335551620&quot;:6,&quot;335559739&quot;:160,&quot;335559740&quot;:259}\">\u00a0<\/span><\/p>\n<p><span class=\"TextRun SCXW164797461 BCX8\" lang=\"EN-GB\" xml:lang=\"EN-GB\" data-contrast=\"auto\"><span class=\"NormalTextRun SCXW164797461 BCX8\">There are three types of personal data<\/span><span class=\"NormalTextRun SCXW164797461 BCX8\">:\u00a0<\/span><\/span><span class=\"EOP SCXW164797461 BCX8\" data-ccp-props=\"{&quot;201341983&quot;:0,&quot;335551550&quot;:6,&quot;335551620&quot;:6,&quot;335559739&quot;:160,&quot;335559740&quot;:259}\">\u00a0<\/span><\/p>\n<ul>\n<li><span data-contrast=\"auto\">General personal data<\/span><span data-ccp-props=\"{&quot;201341983&quot;:0,&quot;335551550&quot;:6,&quot;335551620&quot;:6,&quot;335559739&quot;:160,&quot;335559740&quot;:259}\">\u00a0<\/span><\/li>\n<li><span data-contrast=\"auto\">Sensitive personal data<\/span><span data-ccp-props=\"{&quot;201341983&quot;:0,&quot;335551550&quot;:6,&quot;335551620&quot;:6,&quot;335559739&quot;:160,&quot;335559740&quot;:259}\">\u00a0<\/span><\/li>\n<li><span data-contrast=\"auto\">Details of criminal offences<\/span><span data-ccp-props=\"{&quot;201341983&quot;:0,&quot;335551550&quot;:6,&quot;335551620&quot;:6,&quot;335559739&quot;:160,&quot;335559740&quot;:259}\">\u00a0<\/span><\/li>\n<\/ul>\n<p><span data-contrast=\"auto\">General personal data can include your client\u2019s or customer\u2019s personal information, such as names, emails, or physical addresses. Information such as passwords, security numbers, financial records, and employment details are also deemed as general personal data, among many others.<\/span><span data-ccp-props=\"{&quot;201341983&quot;:0,&quot;335551550&quot;:6,&quot;335551620&quot;:6,&quot;335559739&quot;:160,&quot;335559740&quot;:259}\">\u00a0<\/span><\/p>\n<p><span data-contrast=\"auto\">Data classified as sensitive or special category data, according to <a href=\"https:\/\/www.imsm.com\/south-africa\/gdpr\/\">GDPR<\/a>, needs a greater level of protection because it is sensitive. This data includes:<\/span><span data-ccp-props=\"{&quot;201341983&quot;:0,&quot;335551550&quot;:6,&quot;335551620&quot;:6,&quot;335559739&quot;:160,&quot;335559740&quot;:259}\">\u00a0<\/span><\/p>\n<ul>\n<li><span data-contrast=\"none\">Ethnic or racial origins<\/span><span data-ccp-props=\"{&quot;134233117&quot;:true,&quot;134233118&quot;:true,&quot;201341983&quot;:0,&quot;335559739&quot;:160,&quot;335559740&quot;:240}\">\u00a0<\/span><\/li>\n<li><span data-contrast=\"none\">Political, religious, or philosophical opinions<\/span><span data-ccp-props=\"{&quot;134233118&quot;:true,&quot;201341983&quot;:0,&quot;335559738&quot;:120,&quot;335559739&quot;:160,&quot;335559740&quot;:240}\">\u00a0<\/span><\/li>\n<li><span data-contrast=\"none\">Trade union memberships<\/span><span data-ccp-props=\"{&quot;134233118&quot;:true,&quot;201341983&quot;:0,&quot;335559738&quot;:120,&quot;335559739&quot;:160,&quot;335559740&quot;:240}\">\u00a0<\/span><\/li>\n<li><span data-contrast=\"none\">Genetic data<\/span><span data-ccp-props=\"{&quot;134233118&quot;:true,&quot;201341983&quot;:0,&quot;335559738&quot;:120,&quot;335559739&quot;:160,&quot;335559740&quot;:240}\">\u00a0<\/span><\/li>\n<li><span data-contrast=\"none\">Biometric data (where used for identification purposes)<\/span><span data-ccp-props=\"{&quot;134233118&quot;:true,&quot;201341983&quot;:0,&quot;335559738&quot;:120,&quot;335559739&quot;:160,&quot;335559740&quot;:240}\">\u00a0<\/span><\/li>\n<li><span data-contrast=\"none\">Health-related data<\/span><span data-ccp-props=\"{&quot;134233118&quot;:true,&quot;201341983&quot;:0,&quot;335559738&quot;:120,&quot;335559739&quot;:160,&quot;335559740&quot;:240}\">\u00a0<\/span><\/li>\n<li><span data-contrast=\"none\">Sex life or sexual orientation<\/span><span data-ccp-props=\"{&quot;134233118&quot;:true,&quot;201341983&quot;:0,&quot;335559738&quot;:120,&quot;335559739&quot;:160,&quot;335559740&quot;:240}\">\u00a0<\/span><\/li>\n<\/ul>\n<p><span class=\"TextRun SCXW214408140 BCX8\" lang=\"EN-GB\" xml:lang=\"EN-GB\" data-contrast=\"auto\"><span class=\"NormalTextRun SCXW214408140 BCX8\">With <a href=\"https:\/\/www.imsm.com\/gb\/iso-27001\/\">ISO<\/a><\/span><a href=\"https:\/\/www.imsm.com\/south-africa\/iso-27001\/\"><span class=\"NormalTextRun SCXW214408140 BCX8\">\/IEC<\/span><\/a><span class=\"NormalTextRun SCXW214408140 BCX8\"><a href=\"https:\/\/www.imsm.com\/gb\/iso-27001\/\"> 27001<\/a>, data and information will be <\/span><span class=\"NormalTextRun SCXW214408140 BCX8\">managed<\/span><span class=\"NormalTextRun SCXW214408140 BCX8\"> safely and appropriately to prevent misuse. <\/span><span class=\"NormalTextRun SCXW214408140 BCX8\">Data must be<\/span><span class=\"NormalTextRun SCXW214408140 BCX8\"> retained <\/span><span class=\"NormalTextRun SCXW214408140 BCX8\">solely <\/span><span class=\"NormalTextRun SCXW214408140 BCX8\">for its purpose and <\/span><span class=\"NormalTextRun SCXW214408140 BCX8\">by<\/span><span class=\"NormalTextRun SCXW214408140 BCX8\"><a href=\"https:\/\/www.imsm.com\/south-africa\/gdpr\/\"> GDPR<\/a> rules and <\/span><span class=\"NormalTextRun SCXW214408140 BCX8\">regulations<\/span><span class=\"NormalTextRun SCXW214408140 BCX8\">.<\/span><\/span><span class=\"EOP SCXW214408140 BCX8\" data-ccp-props=\"{&quot;201341983&quot;:0,&quot;335559739&quot;:160,&quot;335559740&quot;:259}\">\u00a0<\/span><\/p>\n<h2><span class=\"TextRun SCXW91855388 BCX8\" lang=\"EN-GB\" xml:lang=\"EN-GB\" data-contrast=\"auto\"><span class=\"NormalTextRun SCXW91855388 BCX8\">Does ISO<\/span><span class=\"NormalTextRun SCXW91855388 BCX8\">\/IEC<\/span><span class=\"NormalTextRun SCXW91855388 BCX8\"> 27001 cover physical security?<\/span><\/span><span class=\"EOP SCXW91855388 BCX8\" data-ccp-props=\"{&quot;201341983&quot;:0,&quot;335559739&quot;:160,&quot;335559740&quot;:259}\">\u00a0<\/span><\/h2>\n<p><span data-contrast=\"auto\"><a href=\"https:\/\/www.imsm.com\/south-africa\/iso-27001\/\">ISO\/IEC 27001<\/a> does include a section on how your organisation should be guided in the event of a data breach occurring in the physical environment of your business.<\/span><span data-ccp-props=\"{&quot;201341983&quot;:0,&quot;335559739&quot;:160,&quot;335559740&quot;:259}\">\u00a0<\/span><\/p>\n<p><span data-contrast=\"auto\"><a href=\"https:\/\/www.imsm.com\/south-africa\/wp-content\/uploads\/sites\/10\/2022\/11\/ISO-27001-2022.pdf\">ISO\/IEC 27001:2022<\/a> includes controls that are distributed across four categories; these include organisations, people, physical and technological. Clause 7 of Annex A includes physical controls, which must be maintained to a high efficiency to protect physical security.<\/span><span data-ccp-props=\"{&quot;201341983&quot;:0,&quot;335559739&quot;:160,&quot;335559740&quot;:259}\">\u00a0<\/span><\/p>\n<p><span data-contrast=\"auto\">The environment in which data is handled should be competently assessed for non-conformities and hazards which could occur unexpectedly.<\/span><span data-ccp-props=\"{&quot;201341983&quot;:0,&quot;335559739&quot;:160,&quot;335559740&quot;:259}\">\u00a0<\/span><\/p>\n<p><span data-contrast=\"auto\">Through implementing <a href=\"https:\/\/www.imsm.com\/south-africa\/iso-27001\/\">ISO\/IEC 27001<\/a> within your organisation, the probability of environmental and physical security risks occurring will be significantly reduced. You can be assured that your systems will be continually assessed to a high standard, and you can regularly maintain your business\u2019s competency.<\/span><span data-ccp-props=\"{&quot;201341983&quot;:0,&quot;335559739&quot;:160,&quot;335559740&quot;:259}\">\u00a0<\/span><\/p>\n<p><span class=\"TextRun SCXW1191675 BCX8\" lang=\"EN-GB\" xml:lang=\"EN-GB\" data-contrast=\"auto\"><span class=\"NormalTextRun SCXW1191675 BCX8\">The controls outlined in <\/span><span class=\"NormalTextRun SCXW1191675 BCX8\">Clause 7 of Annex A of <\/span><a href=\"https:\/\/www.imsm.com\/south-africa\/iso-27001\/\"><span class=\"NormalTextRun SCXW1191675 BCX8\">ISO<\/span><span class=\"NormalTextRun SCXW1191675 BCX8\">\/IEC<\/span><\/a><span class=\"NormalTextRun SCXW1191675 BCX8\"> 27001:2022 a<\/span><span class=\"NormalTextRun SCXW1191675 BCX8\">re<\/span><span class=\"NormalTextRun SCXW1191675 BCX8\">:<\/span><\/span><span class=\"EOP SCXW1191675 BCX8\" data-ccp-props=\"{&quot;201341983&quot;:0,&quot;335559739&quot;:160,&quot;335559740&quot;:259}\">\u00a0<\/span><\/p>\n<ul>\n<li><span data-contrast=\"auto\">7.1 Physical security perimeters<\/span><span data-ccp-props=\"{&quot;201341983&quot;:0,&quot;335559739&quot;:160,&quot;335559740&quot;:259}\">\u00a0<\/span><\/li>\n<li><span data-contrast=\"auto\">7.2 Physical entry\u00a0<\/span><span data-ccp-props=\"{&quot;201341983&quot;:0,&quot;335559739&quot;:160,&quot;335559740&quot;:259}\">\u00a0<\/span><\/li>\n<li><span data-contrast=\"auto\">7.3 Securing offices, rooms, and facilities<\/span><span data-ccp-props=\"{&quot;201341983&quot;:0,&quot;335559739&quot;:160,&quot;335559740&quot;:259}\">\u00a0<\/span><\/li>\n<li><span data-contrast=\"auto\">7.4 Physical security monitoring<\/span><span data-ccp-props=\"{&quot;201341983&quot;:0,&quot;335559739&quot;:160,&quot;335559740&quot;:259}\">\u00a0<\/span><\/li>\n<li><span data-contrast=\"auto\">7.5 Protecting against physical and environmental threats<\/span><span data-ccp-props=\"{&quot;201341983&quot;:0,&quot;335559739&quot;:160,&quot;335559740&quot;:259}\">\u00a0<\/span><\/li>\n<li><span data-contrast=\"auto\">7.6 Working in secure areas<\/span><span data-ccp-props=\"{&quot;201341983&quot;:0,&quot;335559739&quot;:160,&quot;335559740&quot;:259}\">\u00a0<\/span><\/li>\n<li><span data-contrast=\"auto\">7.7 Clear desk and clear screen<\/span><span data-ccp-props=\"{&quot;201341983&quot;:0,&quot;335559739&quot;:160,&quot;335559740&quot;:259}\">\u00a0<\/span><\/li>\n<li><span data-contrast=\"auto\">7.8 Equipment siting and protection<\/span><span data-ccp-props=\"{&quot;201341983&quot;:0,&quot;335559739&quot;:160,&quot;335559740&quot;:259}\">\u00a0<\/span><\/li>\n<li><span data-contrast=\"auto\">7.9 Security of assets off-premises<\/span><span data-ccp-props=\"{&quot;201341983&quot;:0,&quot;335559739&quot;:160,&quot;335559740&quot;:259}\">\u00a0<\/span><\/li>\n<li><span data-contrast=\"auto\">7.10 Storage media<\/span><span data-ccp-props=\"{&quot;201341983&quot;:0,&quot;335559739&quot;:160,&quot;335559740&quot;:259}\">\u00a0<\/span><\/li>\n<li><span data-contrast=\"auto\">7.11 Supporting utilities<\/span><span data-ccp-props=\"{&quot;201341983&quot;:0,&quot;335559739&quot;:160,&quot;335559740&quot;:259}\">\u00a0<\/span><\/li>\n<li><span data-contrast=\"auto\">7.12 Cabling security<\/span><span data-ccp-props=\"{&quot;201341983&quot;:0,&quot;335559739&quot;:160,&quot;335559740&quot;:259}\">\u00a0<\/span><\/li>\n<li><span data-contrast=\"auto\">7.13 Equipment maintenance<\/span><span data-ccp-props=\"{&quot;201341983&quot;:0,&quot;335559739&quot;:160,&quot;335559740&quot;:259}\">\u00a0<\/span><\/li>\n<li><span data-contrast=\"auto\">7.14 Secure disposal or re-use of equipment<\/span><span data-ccp-props=\"{&quot;201341983&quot;:0,&quot;335559739&quot;:160,&quot;335559740&quot;:259}\">\u00a0<\/span><\/li>\n<\/ul>\n<p><span data-contrast=\"auto\">For example, in control 7.2, physical entry controls detail that secure areas should be protected by appropriate entry controls and access points. This ensures that only authorized personnel should have physical access to your organisation&#8217;s information. Physical entry controls include technical mechanisms to manage areas of access, such as entry doors, gates, card readers, ID scanners, keypads, and revolving doors. <\/span><span data-ccp-props=\"{&quot;201341983&quot;:0,&quot;335559739&quot;:160,&quot;335559740&quot;:259}\">\u00a0<\/span><\/p>\n<p><span data-contrast=\"auto\">In control 7.10, storage media, <a href=\"https:\/\/www.imsm.com\/south-africa\/iso-27001\/\">ISO\/IEC 27001<\/a> addresses how organisations can manage their storage media devices, such as SSD\u2019s, USB sticks, external drives, and mobile devices, through their life cycle of acquisition, use, transportation, and disposal in accordance with their handling requirements. <\/span><span data-ccp-props=\"{&quot;201341983&quot;:0,&quot;335559739&quot;:160,&quot;335559740&quot;:259}\">\u00a0<\/span><\/p>\n<p><span data-contrast=\"auto\"><a href=\"https:\/\/www.imsm.com\/south-africa\/iso-27001\/\">ISO\/IEC 27001<\/a> includes controls and clauses that cover physical security within your organisation. Therefore, you can be assured that by following <a href=\"https:\/\/www.imsm.com\/south-africa\/iso-27001\/\">ISO\/IEC 27001<\/a>, your controls and security management are protected against physical security risks.<\/span><\/p>\n<figure class=\"u-TextAlignNone\"><img loading=\"lazy\" decoding=\"async\" class=\"c-Image alignnone\" src=\"https:\/\/www.imsm.com\/gb\/wp-content\/uploads\/2022\/11\/Be-safe-from-physical-security-risks-1200-\u00d7-400-px-v2.png\" alt=\"82% of cyber security breaches involved a human element\" width=\"1200\" height=\"400\" \/><\/figure>\n<h2><span class=\"TextRun SCXW146540698 BCX8\" lang=\"EN-GB\" xml:lang=\"EN-GB\" data-contrast=\"auto\"><span class=\"NormalTextRun SCXW146540698 BCX8\">I\u2019m interested in ISO<\/span><span class=\"NormalTextRun SCXW146540698 BCX8\">\/IEC<\/span><span class=\"NormalTextRun SCXW146540698 BCX8\"> 27001. What can I do next?<\/span><\/span><span class=\"EOP SCXW146540698 BCX8\" data-ccp-props=\"{&quot;201341983&quot;:0,&quot;335559739&quot;:160,&quot;335559740&quot;:259}\">\u00a0<\/span><\/h2>\n<p><span data-contrast=\"auto\">Are you interested in learning more about what <a href=\"https:\/\/www.imsm.com\/south-africa\/iso-27001\/\">ISO\/IEC 27001<\/a> can do to help your business? Please<\/span><span data-contrast=\"auto\">\u00a0<\/span><a href=\"https:\/\/blog.imsm.com\/27001-guide-download?_gl=1*1eg5qfr*_ga*MTI0NTI4NjYwOS4xNjYwNTU0NjA0*_ga_3D8T6ZJS4B*MTY3MzUxNjIyNy4yNDEuMS4xNjczNTI2MjUxLjAuMC4w\"><span data-contrast=\"none\">download our free guide<\/span><\/a><span data-contrast=\"auto\"> for more information.<\/span><span data-ccp-props=\"{&quot;201341983&quot;:0,&quot;335559739&quot;:160,&quot;335559740&quot;:259}\">\u00a0<\/span><\/p>\n<p><span data-contrast=\"auto\">If you are interested in <a href=\"https:\/\/www.imsm.com\/south-africa\/iso-27001\/\">ISO\/IEC 27001<\/a>, you can contact us and schedule a free consultation with one of our specialist consultants. Here at IMSM, we have a transparent fixed fee and flexible approach, helping you to seamlessly earn certification.<\/span><span data-ccp-props=\"{&quot;201341983&quot;:0,&quot;335559739&quot;:160,&quot;335559740&quot;:259}\">\u00a0<\/span><\/p>\n<p><span data-contrast=\"auto\">Do you already have <a href=\"https:\/\/www.imsm.com\/south-africa\/iso-27001\/\">ISO\/IEC 27001<\/a>? You can become certified to conduct internal audits as an <a href=\"https:\/\/www.imsm.com\/south-africa\/iso-27001\/\">ISO\/IEC 27001<\/a> internal auditor through one of our <\/span><a href=\"https:\/\/www.imsm.com\/south-africa\/live-online-training-courses\/\"><span data-contrast=\"none\">live online training courses<\/span><\/a><span data-contrast=\"auto\">.<\/span><span data-ccp-props=\"{&quot;201341983&quot;:0,&quot;335559739&quot;:160,&quot;335559740&quot;:259}\">\u00a0<\/span><\/p>\n<p><span data-contrast=\"auto\">Sources:<\/span><span data-ccp-props=\"{&quot;201341983&quot;:0,&quot;335559739&quot;:160,&quot;335559740&quot;:259}\">\u00a0<\/span><\/p>\n<p><a href=\"https:\/\/www.verizon.com\/business\/en-au\/resources\/reports\/dbir\/\"><span data-contrast=\"none\">https:\/\/www.verizon.com\/business\/en-au\/resources\/reports\/dbir\/<\/span><\/a><span data-contrast=\"auto\">\u00a0<\/span><span data-ccp-props=\"{&quot;201341983&quot;:0,&quot;335559739&quot;:160,&quot;335559740&quot;:259}\">\u00a0<\/span><\/p>\n<figure class=\"u-TextAlignNone\"><a href=\"https:\/\/www.imsm.com\/south-africa\/iso-27001\/#contact-us\"><img decoding=\"async\" class=\"c-Image\" title=\"\" src=\"https:\/\/www.imsm.com\/south-africa\/wp-content\/uploads\/sites\/10\/2023\/03\/ISO-27001-Get-your-free-quote.png\" alt=\"Get your free quote for ISO 27001\" \/><\/a><\/figure>\n","protected":false},"excerpt":{"rendered":"<p>What is ISO\/IEC 27001?\u00a0 ISO\/IEC 27001 is the international standard for maintaining an Information Security Management System (ISMS). Implementing an [&hellip;]<\/p>\n","protected":false},"author":25,"featured_media":5118,"comment_status":"open","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"content-type":"","inline_featured_image":false,"pgc_sgb_lightbox_settings":"","footnotes":""},"categories":[1],"tags":[31,18,19,30,32,17,15,26,28,29],"class_list":["post-5116","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-uncategorised","tag-annex-a","tag-certification","tag-data-security","tag-environmental-security","tag-gdpr","tag-implementation","tag-iso-27001","tag-iso-standards","tag-iso-updates","tag-physical-security"],"acf":[],"yoast_head":"<!-- This site is optimized with the Yoast SEO plugin v23.9 - https:\/\/yoast.com\/wordpress\/plugins\/seo\/ -->\n<title>Does ISO 27001 cover physical security? | IMSM LTD<\/title>\n<meta name=\"description\" content=\"Does ISO 27001 cover your physical security? Discover more in our blog and contact one of our experts today to start your ISO journey,\" \/>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/www.imsm.com\/south-africa\/news\/does-iso-27001-cover-physical-security\/\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"Does ISO 27001 cover physical security? | IMSM LTD\" \/>\n<meta property=\"og:description\" content=\"Does ISO 27001 cover your physical security? Discover more in our blog and contact one of our experts today to start your ISO journey,\" \/>\n<meta property=\"og:url\" content=\"https:\/\/www.imsm.com\/south-africa\/news\/does-iso-27001-cover-physical-security\/\" \/>\n<meta property=\"og:site_name\" content=\"IMSM ZA\" \/>\n<meta property=\"article:published_time\" content=\"2023-01-16T09:15:37+00:00\" \/>\n<meta property=\"article:modified_time\" content=\"2023-11-07T14:45:17+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/www.imsm.com\/south-africa\/wp-content\/uploads\/sites\/10\/2023\/01\/Does-ISO-27001-cover-physical-security-FEATURE.png\" \/>\n\t<meta property=\"og:image:width\" content=\"1500\" \/>\n\t<meta property=\"og:image:height\" content=\"1500\" \/>\n\t<meta property=\"og:image:type\" content=\"image\/png\" \/>\n<meta name=\"author\" content=\"amywright\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:label1\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data1\" content=\"amywright\" \/>\n\t<meta name=\"twitter:label2\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data2\" content=\"6 minute\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\/\/schema.org\",\"@graph\":[{\"@type\":\"WebPage\",\"@id\":\"https:\/\/www.imsm.com\/south-africa\/news\/does-iso-27001-cover-physical-security\/\",\"url\":\"https:\/\/www.imsm.com\/south-africa\/news\/does-iso-27001-cover-physical-security\/\",\"name\":\"Does ISO 27001 cover physical security? | IMSM LTD\",\"isPartOf\":{\"@id\":\"https:\/\/www.imsm.com\/south-africa\/#website\"},\"primaryImageOfPage\":{\"@id\":\"https:\/\/www.imsm.com\/south-africa\/news\/does-iso-27001-cover-physical-security\/#primaryimage\"},\"image\":{\"@id\":\"https:\/\/www.imsm.com\/south-africa\/news\/does-iso-27001-cover-physical-security\/#primaryimage\"},\"thumbnailUrl\":\"https:\/\/www.imsm.com\/south-africa\/wp-content\/uploads\/sites\/10\/2023\/01\/Does-ISO-27001-cover-physical-security-FEATURE.png\",\"datePublished\":\"2023-01-16T09:15:37+00:00\",\"dateModified\":\"2023-11-07T14:45:17+00:00\",\"author\":{\"@id\":\"https:\/\/www.imsm.com\/south-africa\/#\/schema\/person\/990a6ba5dfd82cda313e2dd00eb363b0\"},\"description\":\"Does ISO 27001 cover your physical security? Discover more in our blog and contact one of our experts today to start your ISO journey,\",\"breadcrumb\":{\"@id\":\"https:\/\/www.imsm.com\/south-africa\/news\/does-iso-27001-cover-physical-security\/#breadcrumb\"},\"inLanguage\":\"af-ZA\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\/\/www.imsm.com\/south-africa\/news\/does-iso-27001-cover-physical-security\/\"]}]},{\"@type\":\"ImageObject\",\"inLanguage\":\"af-ZA\",\"@id\":\"https:\/\/www.imsm.com\/south-africa\/news\/does-iso-27001-cover-physical-security\/#primaryimage\",\"url\":\"https:\/\/www.imsm.com\/south-africa\/wp-content\/uploads\/sites\/10\/2023\/01\/Does-ISO-27001-cover-physical-security-FEATURE.png\",\"contentUrl\":\"https:\/\/www.imsm.com\/south-africa\/wp-content\/uploads\/sites\/10\/2023\/01\/Does-ISO-27001-cover-physical-security-FEATURE.png\",\"width\":1500,\"height\":1500,\"caption\":\"ISO 27001 Data Security\"},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\/\/www.imsm.com\/south-africa\/news\/does-iso-27001-cover-physical-security\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\/\/www.imsm.com\/south-africa\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"Does ISO 27001 cover physical security?\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\/\/www.imsm.com\/south-africa\/#website\",\"url\":\"https:\/\/www.imsm.com\/south-africa\/\",\"name\":\"IMSM ZA\",\"description\":\"\",\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\/\/www.imsm.com\/south-africa\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"af-ZA\"},{\"@type\":\"Person\",\"@id\":\"https:\/\/www.imsm.com\/south-africa\/#\/schema\/person\/990a6ba5dfd82cda313e2dd00eb363b0\",\"name\":\"amywright\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"af-ZA\",\"@id\":\"https:\/\/www.imsm.com\/south-africa\/#\/schema\/person\/image\/\",\"url\":\"https:\/\/secure.gravatar.com\/avatar\/b9a7d7e0f867d04d3ec6ad1557548ab8?s=96&d=mm&r=g\",\"contentUrl\":\"https:\/\/secure.gravatar.com\/avatar\/b9a7d7e0f867d04d3ec6ad1557548ab8?s=96&d=mm&r=g\",\"caption\":\"amywright\"},\"url\":\"https:\/\/www.imsm.com\/south-africa\/news\/author\/amywright\/\"}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"Does ISO 27001 cover physical security? | IMSM LTD","description":"Does ISO 27001 cover your physical security? Discover more in our blog and contact one of our experts today to start your ISO journey,","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/www.imsm.com\/south-africa\/news\/does-iso-27001-cover-physical-security\/","og_locale":"en_US","og_type":"article","og_title":"Does ISO 27001 cover physical security? | IMSM LTD","og_description":"Does ISO 27001 cover your physical security? Discover more in our blog and contact one of our experts today to start your ISO journey,","og_url":"https:\/\/www.imsm.com\/south-africa\/news\/does-iso-27001-cover-physical-security\/","og_site_name":"IMSM ZA","article_published_time":"2023-01-16T09:15:37+00:00","article_modified_time":"2023-11-07T14:45:17+00:00","og_image":[{"width":1500,"height":1500,"url":"https:\/\/www.imsm.com\/south-africa\/wp-content\/uploads\/sites\/10\/2023\/01\/Does-ISO-27001-cover-physical-security-FEATURE.png","type":"image\/png"}],"author":"amywright","twitter_card":"summary_large_image","twitter_misc":{"Written by":"amywright","Est. reading time":"6 minute"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"WebPage","@id":"https:\/\/www.imsm.com\/south-africa\/news\/does-iso-27001-cover-physical-security\/","url":"https:\/\/www.imsm.com\/south-africa\/news\/does-iso-27001-cover-physical-security\/","name":"Does ISO 27001 cover physical security? | IMSM LTD","isPartOf":{"@id":"https:\/\/www.imsm.com\/south-africa\/#website"},"primaryImageOfPage":{"@id":"https:\/\/www.imsm.com\/south-africa\/news\/does-iso-27001-cover-physical-security\/#primaryimage"},"image":{"@id":"https:\/\/www.imsm.com\/south-africa\/news\/does-iso-27001-cover-physical-security\/#primaryimage"},"thumbnailUrl":"https:\/\/www.imsm.com\/south-africa\/wp-content\/uploads\/sites\/10\/2023\/01\/Does-ISO-27001-cover-physical-security-FEATURE.png","datePublished":"2023-01-16T09:15:37+00:00","dateModified":"2023-11-07T14:45:17+00:00","author":{"@id":"https:\/\/www.imsm.com\/south-africa\/#\/schema\/person\/990a6ba5dfd82cda313e2dd00eb363b0"},"description":"Does ISO 27001 cover your physical security? Discover more in our blog and contact one of our experts today to start your ISO journey,","breadcrumb":{"@id":"https:\/\/www.imsm.com\/south-africa\/news\/does-iso-27001-cover-physical-security\/#breadcrumb"},"inLanguage":"af-ZA","potentialAction":[{"@type":"ReadAction","target":["https:\/\/www.imsm.com\/south-africa\/news\/does-iso-27001-cover-physical-security\/"]}]},{"@type":"ImageObject","inLanguage":"af-ZA","@id":"https:\/\/www.imsm.com\/south-africa\/news\/does-iso-27001-cover-physical-security\/#primaryimage","url":"https:\/\/www.imsm.com\/south-africa\/wp-content\/uploads\/sites\/10\/2023\/01\/Does-ISO-27001-cover-physical-security-FEATURE.png","contentUrl":"https:\/\/www.imsm.com\/south-africa\/wp-content\/uploads\/sites\/10\/2023\/01\/Does-ISO-27001-cover-physical-security-FEATURE.png","width":1500,"height":1500,"caption":"ISO 27001 Data Security"},{"@type":"BreadcrumbList","@id":"https:\/\/www.imsm.com\/south-africa\/news\/does-iso-27001-cover-physical-security\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/www.imsm.com\/south-africa\/"},{"@type":"ListItem","position":2,"name":"Does ISO 27001 cover physical security?"}]},{"@type":"WebSite","@id":"https:\/\/www.imsm.com\/south-africa\/#website","url":"https:\/\/www.imsm.com\/south-africa\/","name":"IMSM ZA","description":"","potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/www.imsm.com\/south-africa\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"af-ZA"},{"@type":"Person","@id":"https:\/\/www.imsm.com\/south-africa\/#\/schema\/person\/990a6ba5dfd82cda313e2dd00eb363b0","name":"amywright","image":{"@type":"ImageObject","inLanguage":"af-ZA","@id":"https:\/\/www.imsm.com\/south-africa\/#\/schema\/person\/image\/","url":"https:\/\/secure.gravatar.com\/avatar\/b9a7d7e0f867d04d3ec6ad1557548ab8?s=96&d=mm&r=g","contentUrl":"https:\/\/secure.gravatar.com\/avatar\/b9a7d7e0f867d04d3ec6ad1557548ab8?s=96&d=mm&r=g","caption":"amywright"},"url":"https:\/\/www.imsm.com\/south-africa\/news\/author\/amywright\/"}]}},"_links":{"self":[{"href":"https:\/\/www.imsm.com\/south-africa\/wp-json\/wp\/v2\/posts\/5116","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.imsm.com\/south-africa\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.imsm.com\/south-africa\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.imsm.com\/south-africa\/wp-json\/wp\/v2\/users\/25"}],"replies":[{"embeddable":true,"href":"https:\/\/www.imsm.com\/south-africa\/wp-json\/wp\/v2\/comments?post=5116"}],"version-history":[{"count":4,"href":"https:\/\/www.imsm.com\/south-africa\/wp-json\/wp\/v2\/posts\/5116\/revisions"}],"predecessor-version":[{"id":5424,"href":"https:\/\/www.imsm.com\/south-africa\/wp-json\/wp\/v2\/posts\/5116\/revisions\/5424"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/www.imsm.com\/south-africa\/wp-json\/wp\/v2\/media\/5118"}],"wp:attachment":[{"href":"https:\/\/www.imsm.com\/south-africa\/wp-json\/wp\/v2\/media?parent=5116"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.imsm.com\/south-africa\/wp-json\/wp\/v2\/categories?post=5116"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.imsm.com\/south-africa\/wp-json\/wp\/v2\/tags?post=5116"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}