A.7.4 Audit Checklist

When to use this

Use this checklist during an internal audit of physical security monitoring.

Related controls

• A.7.4 Physical Security Monitoring
• A.7.4 Audit Evidence Pack
• Physical Security Monitoring Procedure
• Physical Security Alarm Test Record
• Physical Security False Alarm Register

Audit checklist

• Confirm premises monitoring scope is documented.
• Confirm monitoring is continuous where required.
• Review monitoring service or personnel responsibilities.
• Check alarm response and escalation procedures.
• Review alarm test records.
• Interview monitoring staff on response, false positives, and escalation.
• Check whether information security is notified when information/assets may be affected.
• Review alarm logs and closure records.
• Review false alarm tracking and corrective actions.
• Confirm monitoring procedures link to incident management.

Findings table