Control 7.2 is primarily concerned with protecting information and other associated assets from unauthorised access, theft or loss. Physical security is of primary importance when protecting the confidentiality, integrity, and availability of information assets. Control TypeĬontrol 7.2 ensures only authorised physical access to the organisation’s information and other associated assets occurs. The attributes in control 7.2 are as follows. Using these, you can easily match your control choice with regularly used industry phrases and requirements. Attributes TableĪttributes are used to classify controls. The access point transmits data back to headquarters so that security personnel can monitor when someone enters or leaves the facility and which areas they are accessing while they are there. It uses radio frequency identification (RFID) technology to track all movement in and out of the facility. Access PointsĪn access point is an electronic device that provides security in large commercial buildings. They can also include other features such as locking mechanisms for doors and gates, as well as turnstiles or revolving doors. Entry ControlsĮntry controls are the devices that allow you access into a building through doors or gates, such as keypads, card readers, biometric scanners and fobs.

They’re what makes it possible for you to get in and out of your building without compromising its safety, and they can also prevent unauthorised or unwanted people from entering. What is Control 7.2?Įntry controls and access points are a crucial part of any building’s security system.

Security controls are an essential part of information security management for all organizations that store and manage confidential information.Īlthough the specific requirements for handling information security will vary from business to business, organizations can implement common controls to secure their data and meet their legal and contractual obligations.Ĭlause 6.1.2 of ISO 27001 sets out a risk management process that organizations should follow when selecting and implementing security controls.Control 7.2 covers the need for organisations to protect secure areas by using appropriate entry controls and access points. How to select and implement ISO 27001 security controls

Iso 27002 controls checklist