When to use this
Use this checklist during an internal audit of power, cooling, telecommunications, water, emergency lighting, fire protection, and building-management utility resilience.
Related controls
- A.7.11 Supporting Utilities
- A.7.11 Audit Evidence Pack
- Supporting Utility Dependency Register
- Supporting Utility Inspection and Test Log
- UPS and Generator Capacity Test Record
- Building Management System Security Review
Audit checklist
- Confirm critical utility dependencies are documented.
- Confirm required operating period/service level is defined.
- Review utility inspection and test records.
- Check UPS/generator runtime and load testing.
- Confirm cooling is included in resilience planning.
- Review HVAC maintenance and alarm records.
- Check telecommunications redundancy or risk acceptance.
- Check emergency lighting test records.
- Check supplier/provider agreements where relevant.
- Review BMS security controls where in scope.
Findings table
| Facility/utility | Expected evidence | Observed evidence | Gap | Finding type | Action owner |
|---|---|---|---|---|---|
| TBD | TBD | TBD | TBD | NC / observation / conforming | TBD |
- Iso27001
- ISO27002
- Template
- Audit
- A7 11
Note Metadata
Aliases: A.7.11 Supporting Utilities Audit Checklist
Source: 90 Templates/A.7.11 Audit Checklist.md
Graph-sourced resources
Templates and evidence
Auditor evidence packs
Evidence collections and audit-facing verification material.
Related Notes
- ISO 27001 A.7.11 - Supporting Utilities
- A.7 Physical Controls MOC
- A.7.11 Audit Evidence Pack
- Audit Evidence MOC
- AQ-ISO27001-A.7.11 Supporting Utilities
- A.7 Physical Controls Audit Guide
- A.7 Physical Controls Implementation Audit Risk Mapping
- Building Management System Security Review
- Supporting Utility Dependency Register
- Supporting Utility Inspection and Test Log
- UPS and Generator Capacity Test Record
- Audit Evidence Index
- Templates MOC