UnixTime

Research Note

A.7.5 Audit Checklist

Use this checklist during an internal audit of physical and environmental threat protection.

On this page

When to use this

Use this checklist during an internal audit of physical and environmental threat protection.

Audit checklist

  • Confirm physical/environmental hazards have been identified.
  • Confirm neighboring-premises risks were considered.
  • Review specialist advice for material hazards.
  • Check implemented fire, flood, power, cooling, and environmental controls.
  • Walk the site and inspect practical weaknesses.
  • Check whether controls have degraded over time.
  • Confirm fallback and backup arrangements align with BCP/ICT continuity.
  • Review training records for emergency and response roles.
  • Confirm findings and actions are tracked.

Findings table

Area/hazard Expected evidence Observed evidence Gap Finding type Action owner
TBD TBD TBD TBD NC / observation / conforming TBD