Exam ISO-IEC-27001-Lead-Auditor Topic 5 Question 6 Discussion

A physical security measure is a measure that protects information and information processing facilities from physical threats and hazards, such as fire, flood, earthquake, theft, vandalism, etc. Physical security measures include locks, alarms, fences, cameras, fire extinguishers, ventilation systems, etc. The computer room is protected by a pass reader that only allows authorized personnel from the System Management department to access it. This is an example of a physical security measure, because it prevents unauthorized physical access to the computer room and its contents. ISO/IEC 27001:2022 requires the organization to implement physical and environmental security controls to prevent unauthorized physical access, damage and interference to the organization's information and information processing facilities (see clause A.11). Reference: CQI & IRCA Certified ISO/IEC 27001:2022 Lead Auditor Training Course, ISO/IEC 27001:2022 Information technology - Security techniques - Information security management systems - Requirements, What is Physical Security?