Memory cue
| Control | Cue |
|---|---|
| A.7.11 Supporting Utilities | Critical processing needs power, cooling, telecoms, water, alarms, and tested resilience |
Likely exam traps
- A.7.11 is not only electricity.
- UPS or generator existence is weak unless capacity, runtime, maintenance, and tests match documented requirements.
- Cooling must be included in resilience planning; powered servers can still fail if HVAC stops.
- Emergency lighting, water, telecoms, fire protection, and utility provider dependencies may matter.
- Redundant utility connections should be implemented where justified or consciously risk-accepted.
- Building management systems in scope should be treated like IT systems.
Quick comparison
| Control | Main question |
|---|---|
| A.7.5 Protecting Against Physical and Environmental Threats | Are broad physical/environmental hazards addressed? |
| A.7.8 Equipment Siting and Protection | Is equipment placed and protected from local hazards? |
| A.7.11 Supporting Utilities | Will required utilities keep information processing facilities available? |
Practical mentor takeaway
Exam lens
For A.7.11, look for tested utility resilience. Installed infrastructure is not enough unless it has capacity, maintenance, alarms, response, and continuity alignment.
- Iso27001
- Exam
- Physical controls
Note Metadata
Aliases: A.7.11 exam cues
Source: 09-Exam-Preparation/EXAM-025-Supporting-Utilities.md