What the auditor wants to verify
Audit objective
Verify that power, data, and supporting service cables are protected from interception, interference, and damage.
Evidence to request
| Evidence | Purpose |
|---|---|
| Cabling route documentation | Shows cable paths and weak points are known |
| Cable labelling/colour coding standard | Shows connections are controlled |
| Cabling inspection records | Shows cables are reviewed in practice |
| Locked cabinet/access records | Shows terminations and patch panels are protected |
| Risk assessment for exposed routes | Shows interception/tampering risk is considered |
| Provider correspondence | Shows external junction risks are addressed |
Strong evidence
- Cable routes are documented and protected.
- Power/data segregation is implemented where needed.
- Patch panels, cabinets, and connections are locked or access-controlled.
- Labels and colour coding reduce incorrect connections.
- Inspection records identify and correct exposed, damaged, or unsafe cabling.
Weak evidence
- Loose cables run across floors or walls.
- Patch panels are unlocked or unlabelled.
- Cable diagrams are missing or stale.
- External junction boxes are ignored.
- Power/data interference is not assessed.
Sample interview questions
- Where are critical cable routes documented?
- Who can access communications cabinets and patch panels?
- How are power and data cables segregated?
- How are external telecommunications junctions risk-assessed?
- How often are cable routes inspected?
Common nonconformities
- Unprotected or loose cabling.
- Inadequate cable labelling.
- Patch panels accessible to unauthorized people.
- Power and data routed together without risk assessment.
- External or inter-building cabling not assessed.
Related notes
- Iso27001
- ISO27002
- Audit
- Evidence
- A7 12
Note Metadata
Aliases: A.7.12 Evidence
Source: 04 Audit Evidence Packs/A.7.12 Audit Evidence Pack.md
Graph-sourced resources
Templates and evidence
Auditor evidence packs
Evidence collections and audit-facing verification material.