When to use this
Use this template when placing, reviewing, relocating, or risk-assessing equipment that processes, stores, transmits, or displays information.
Related controls
- A.7.8 Equipment Siting and Protection
- A.5.9 Inventory of Information and Other Associated Assets
- A.7.5 Protecting Against Physical and Environmental Threats
- A.7.7 Clear Desk and Clear Screen
Assessment table
| Equipment | Location | Owner | Information handled | Physical exposure | Environmental exposure | Viewing exposure | Current protection | Gap/action |
|---|---|---|---|---|---|---|---|---|
| TBD | TBD | TBD | TBD | Window/public/cupboard/secure room | Heat/water/dust/vibration/chemical/interference | Public/visitor/internal | TBD | TBD |
Decision checklist
- Equipment is recorded in inventory.
- Location supports the equipment’s confidentiality, integrity, and availability needs.
- Unauthorized access risk is assessed.
- Environmental hazards are assessed.
- Screen/viewing exposure is assessed.
- Remote or network responsibility boundaries are defined.
- Protection decision is recorded.
- Template
- Iso27001
- Physical controls
- Equipment
Note Metadata
Aliases: Equipment Siting Assessment
Source: 90 Templates/Equipment Siting and Protection Assessment.md
Related Notes
- ISO 27001 A.5.9 - Inventory of Information and Other Associated Assets
- ISO 27001 A.7.5 - Protecting Against Physical and Environmental Threats
- ISO 27001 A.7.7 - Clear Desk and Clear Screen
- ISO 27001 A.7.8 - Equipment Siting and Protection
- A.7 Physical Controls MOC
- A.7.8 Audit Evidence Pack
- A.7 Physical Controls Implementation Guide
- A.7 Physical Controls Audit Guide
- A.7 Physical Controls Implementation Audit Risk Mapping
- ISO 27002 Annex A Control Interpretation Map
- A.7.8 Audit Checklist
- Equipment Protection Inspection Checklist
- Templates MOC