Daily Archives: April 11, 2023

Introduction: In the digital era, data is the backbone of organizations. Therefore, it is essential to protect the physical infrastructure that supports the data and IT systems.  This is where cabling security comes into play.  Cabling security is the protection of the physical infrastructure that supports data and IT systems.  […]

Introduction: The uninterrupted supply of power and proper cooling is critical for the smooth operation of shared or critical IT systems.  Facilities and electrical engineers must ensure that the electrical power arrangements for computer rooms, network closets, and other locations housing IT equipment are reliable and of high quality.  They […]

Introduction: Information and communication technology (ICT) equipment is the backbone of most businesses, making it imperative to secure and protect it against various physical and environmental threats.  Organizations must evaluate the risks associated with these threats and implement controls that minimize the risks to ICT equipment.  ISO/IEC 27001 A.11.2.1 is […]

Introduction: Physical security is a crucial aspect of information security, which is often overlooked.  The physical security measures protect an organization’s assets and personnel against theft, unauthorized access, and damage.  ISO 27001 provides a set of standards to evaluate an organization’s physical security controls.  A.11.1.6 Delivery and loading areas are […]

Introduction: Physical security is a critical aspect of any organization’s security program.  It is the first line of defense against external and internal threats to an organization’s assets, including data, people, and infrastructure. Physical security measures include access controls, video surveillance, alarm systems, and fire protection systems, among others. ISO/IEC […]

Introduction: The security of an organization’s physical environment is crucial for protecting its assets and maintaining business continuity.  In ISO/IEC 27001:2013, Annex A.11 covers the physical and environmental security aspects of information security management. In this article, we will focus on A.11.1.4, which deals with protecting against external and environmental […]

Introduction: Physical security is an essential aspect of an organization’s security framework that ensures the protection of physical assets, people, and information.  The objective of physical security is to prevent unauthorized access to sensitive areas, equipment, and data storage locations.  The ISO 27001 standard provides guidance on physical security controls […]

Introduction: Physical security is an important aspect of an organization’s overall security posture.  It includes the security measures taken to protect physical assets, people, and information technology infrastructure from physical threats such as theft, damage, and unauthorized access.  A.11.1.2 of ISO 27001 standard focuses on physical entry controls and outlines […]

Introduction: Physical security is an important aspect of information security management.  The physical security perimeter is defined as the area where an organization’s critical assets are located.  The perimeter is used to protect against unauthorized access, theft, and damage to information systems and data.  This article will cover the A.11.1.1 […]

Introduction: As organizations rely more on digital information, securing data is becoming more important than ever.  Cryptography is one of the most effective methods of protecting information by rendering it unreadable to anyone without the appropriate keys.  However, cryptography is only as strong as its key management system.  In this […]