SekitCrosswalk
ENES
Empieza ahora
Sekit CSF · Familia

Physical & Environmental

18 controles en 6 temas, cada uno visto a través de las lentes de política, proceso y técnica.

Política

RCF-0313Cabling/security zones4 mapeosPhysical cable infrastructure and security zones are formally defined and protected against unauthorised accessRCF-0304CCTV monitoring3 mapeosThe company formally operates surveillance systems to monitor physical security in sensitive areasRCF-0298Facility access control4 mapeosPhysical access to company facilities and restricted areas is formally governed and restricted to authorised personnelRCF-0310Media storage & destruction3 mapeosFormal procedures govern how physical media containing sensitive data is stored and destroyedRCF-0307Power/HVAC resilience4 mapeosThe company formally addresses the risk of power or environmental failures affecting critical systemsRCF-0301Visitor management4 mapeosA formal process governs how visitors are granted access to company premises and escorted within restricted areas

Proceso

RCF-0314Cabling/security zones4 mapeosPhysical security zones are consistently maintained and cabling is inspected for tampering regularlyRCF-0305CCTV monitoring3 mapeosCCTV systems are consistently monitored and footage is retained and reviewed following security eventsRCF-0299Facility access control5 mapeosPhysical access rights are consistently reviewed and removed when employees leave or change rolesRCF-0311Media storage & destruction3 mapeosPhysical media is consistently tracked, stored securely and destroyed using approved methods when no longer neededRCF-0308Power/HVAC resilience5 mapeosPower and cooling systems are consistently tested and maintained to prevent environmental failuresRCF-0302Visitor management4 mapeosVisitors are consistently registered, badged and escorted in accordance with the visitor management policy

Técnica

RCF-0315Cabling/security zones3 mapeosTechnical controls physically secure cabling infrastructure and detect unauthorised modifications to network connectionsRCF-0306CCTV monitoring3 mapeosTechnical surveillance systems provide continuous recording and alerting for physical security eventsRCF-0300Facility access control4 mapeosTechnical controls such as access cards, biometrics and audit logs govern and record physical access to facilitiesRCF-0312Media storage & destruction3 mapeosTechnical tools certify and record the secure destruction of physical media containing sensitive informationRCF-0309Power/HVAC resilience4 mapeosTechnical controls such as UPS, backup generators and environmental sensors protect against power and climate failuresRCF-0303Visitor management4 mapeosTechnical systems record visitor arrivals and departures and generate access logs for security review

Esta familia en ISO/IEC 27001:2022

Cada elemento de marco al que mapean los controles de la familia, primero los más conectados; agrupado por familia del Sekit CSF, nunca por el índice del propio marco.

A.7.4 Physical security monitoringA.7.2 Physical entryA.7.10 Storage mediaA.7.1 Physical security perimetersA.7.12 Cabling securityA.7.11 Supporting utilitiesA.7.5 Protecting against physical and environmental threatsA.7.6 Working in secure areasA.8.15 LoggingA.5.18 Access rightsA.7.13 Equipment maintenance

Esta familia en NIST CSF 2.0

PR.IR-02 Assets protected from environmental threatsPR.AA-05 Access permissions managedPR.IR-01 Networks protected from unauthorized accessPR.DS-01 Data-at-rest protectedPR.DS-10 Data-in-use protectedDE.CM-03 Personnel activity monitoredPR.IR-03 Resilience mechanisms implemented

Esta familia en Cyber Essentials

CE4.1 Manage the account lifecycle
Pregúntale a Sekura: «¿Qué evidencia demuestra Physical & Environmental?»
También vía MCP, gratis con cuenta