A.7.1 Audit Checklist

When to use this

Use this checklist during an internal audit of physical security perimeters.

Related controls

• A.7.1 Physical Security Perimeters
• A.7.1 Audit Evidence Pack
• Physical Security Zone Register
• Physical Security Perimeter Review Checklist

Audit checklist

• Confirm physical security perimeters are defined.
• Confirm zones are linked to information/assets and risk.
• Review perimeter diagrams or zone register.
• Walk the perimeter and check bypass routes.
• Check fire exits, emergency routes, shared areas, and reception.
• Check landlord/building-management access arrangements.
• Check out-of-hours and lone-working controls.
• Verify perimeter review records.
• Interview facilities, reception/security, IT, and zone owners.
• Record nonconformities, observations, and improvement actions.

Findings table