A.7.6 Audit Checklist

When to use this

Use this checklist during an internal audit of work performed inside secure areas.

Related controls

• A.7.6 Working in Secure Areas
• A.7.6 Audit Evidence Pack
• Secure Area Working Procedure
• Secure Area Work Authorization Register

Audit checklist

• Confirm sensitive work and secure areas are identified.
• Confirm entry controls allow only authorized personnel.
• Check need-to-know restrictions.
• Check controls for paper, media, equipment, and information movement.
• Check restrictions on phones, cameras, and recording devices.
• Confirm supervision requirements are defined and followed.
• Confirm dual control is applied where risk requires it.
• Confirm contractors and third parties follow the same procedure.
• Interview personnel and compare answers to the procedure.

Findings table