Physical Security
What is Physical Security?
Measures to protect an organization's physical assets, facilities, and personnel from unauthorized access, theft, damage, and environmental threats.
Terms that appear alongside physical security
Each of these is named in at least one of the same controls as physical security. The number is how many controls name both.
- access control 15 shared controls
- encryption 14 shared controls
- incident response 14 shared controls
- business continuity 13 shared controls
- vulnerability 12 shared controls
- nist 12 shared controls
- authentication 11 shared controls
- audit 10 shared controls
Frameworks that govern physical security
What the standards actually require on physical security
Requirements naming physical security across 6 standards, quoted from the control text.
Agencies must keep physical security, including controls over physical access, strong.
new-zealand-information-security-manual-nzism::22.2.16.C.01 · 22.2.16.C.01 Strong physical security for virtual infrastructure →Develop within 120 calendar days after completing R2, and execute according to its own timeline, a documented physical security plan covering the identified stations, substations and primary control centers.
nerc-cip::CIP-014 R5 · CIP-014-3 R5: Develop and implement physical security plans →The organization is to define security perimeters and use them around areas holding information and other associated assets. Purpose: keep unauthorized people out and prevent physical harm to or tampering with the organization's information and assets.
iso-27002-2022::7.1 · Physical security perimeters →The plan must require that the monitoring program coordinates with the physical security function for the physical security events used in IAC cyber environment monitoring.
api-1164::DE.CM-2 · DE.CM-2 Physical security events coordinated into IAC monitoring →Management implements preventive, detective and corrective physical controls for each security zone: data centre sites chosen to limit exposure to internal, external and environmental threats, not advertised by signage, protected by guards, fences, barriers an...
ffiec-it-examination-handbook::IS-II.C.8 · II.C.8 Physical Security (Information Security) →ISO/IEC 27002:2022 control 7.1 applies, with telecommunications guidance: equip operations centres with adequate physical intruder detection;
iso-iec-27011-2024::7.1 · Physical security perimeter →Questions people ask about physical security
What is Physical Security?
Why is Physical Security important for compliance?
Which compliance frameworks address Physical Security?
Where can I learn more about Physical Security?
See how Physical Security applies across compliance frameworks
Our platform maps 1,016 frameworks with 316K cross-framework control mappings. Explore how this concept is addressed across standards.