Memory cue
| Control | Cue |
|---|---|
| A.7.8 Equipment Siting and Protection | Put equipment where it will not be damaged, misused, interfered with, viewed, or forgotten |
Likely exam traps
- A.7.8 is broader than server room protection.
- Equipment siting includes workstations, network devices, terminals, screens, communications equipment, and remote equipment.
- Environmental risks can include moisture, vibration, heat, dust, chemicals, electrical interference, and electromagnetic interference.
- Visible screens are not only a clear-screen issue; physical placement matters.
- Remote equipment still needs inventory, scope, responsibility boundaries, risk assessment, and protection.
- Specialized measures such as shielding should be risk-based, not assumed mandatory.
Comparison with nearby controls
| Control | Main question |
|---|---|
| A.7.5 Protecting Against Physical and Environmental Threats | Are site and infrastructure hazards identified and controlled? |
| A.7.7 Clear Desk and Clear Screen | Are unattended papers, media, screens, printers, and faxes controlled? |
| A.7.8 Equipment Siting and Protection | Is equipment placed and protected against physical, environmental, access, viewing, and interference risks? |
Practical mentor takeaway
Exam lens
For A.7.8, think “asset inventory meets physical walkthrough.” The auditor wants to see that equipment is known, placed sensibly, protected from realistic hazards, and not exposed to unauthorized access or viewing.
- Iso27001
- Exam
- Physical controls
Note Metadata
Aliases: A.7.8 exam cues
Source: 09-Exam-Preparation/EXAM-023-Equipment-Siting-and-Protection.md