Skip to content

Building Security

What is Building Security?

Physical security measures protecting an organization's buildings and facilities from unauthorized access, theft, vandalism, and environmental threats.

Information Security

What the standards actually require on building security

Requirements naming building security across 6 standards, quoted from the control text.

ISO 27002:20222 controls

Information security requirements are to be identified, specified and approved whenever applications are developed or acquired. Purpose: leave no security requirement unidentified or unaddressed when an application is built or bought.

iso-27002-2022::8.26 · Application security requirements →

Data collected by a device may not be used for purposes other than those for which it was installed; a badge log kept for building security may not be used to check employees' hours (purpose limitation, GDPR article 5(1)(b)).

cnil-guidance-on-employee-monitoring-and-workplace-video-surveillance::ACC-2 · ACC-2 Do not reuse access-control logs for another purpose such as checking hours →

Systems, products and business practices are developed around the principle of building security in from the start, following recognised industry practice.

cloud-security-alliance-cloud-controls-matrix-ccm-v4-1::DSP-07 · Data Protection by Design and Default →

An IoT service is developed by a service developer and one or more device developers, provided by a service provider and used by users;

iso-iec-27400-2022::5.5 · 5.5 IoT service life cycles →

Practise security by design, building security requirements into financial products and services from planning and design, verifying risk across the whole service flow including critical third parties and taking measures;

japan-fsa-cybersecurity-guidelines-for-financial-institutions::2.3.4.3-B · 2.3.4.3 Security by design: basic actions →

AEOs build security best practice into operations: building security, perimeter monitoring and access control over facilities, conveyances, loading docks and cargo areas;

wco-safe-framework-of-standards-to-secure-and-facilitate-global-trade-2021::P2.S2 · Pillar 2 Standard 2: security →

Questions people ask about building security

What is Building Security?
Physical security measures protecting an organization's buildings and facilities from unauthorized access, theft, vandalism, and environmental threats.
Why is Building Security important for compliance?
Building Security is a key concept in Information Security. Understanding building security helps organizations meet regulatory requirements, reduce risk, and demonstrate due diligence during audits. Our compliance platform maps 1,016 frameworks with 316K cross-framework control mappings.
Which compliance frameworks address Building Security?
Building Security appears in the requirement text of ISO 27002:2022, CNIL Guidance on Employee Monitoring and Workplace Video Surveillance, Cloud Security Alliance Cloud Controls Matrix (CCM) v4.1, ISO/IEC 27400:2022, Japan FSA Cybersecurity Guidelines for Financial Institutions. Across these standards we have identified 7 controls that name it directly, each linked to the control text on the compliance platform.
Where can I learn more about Building Security?
Explore our compliance framework pages to see how building security applies across different standards and regulations. Our implementation guides provide step-by-step guidance, and the compliance platform offers AI-powered analysis of how this concept maps across 1,016 frameworks.

See how Building Security applies across compliance frameworks

Our platform maps 1,016 frameworks with 316K cross-framework control mappings. Explore how this concept is addressed across standards.

Written and maintained by Gerard Blokdyk, The Art of Service.