Sensitive Room Signage and Directory Review

When to use this

Use this checklist to review whether signs, directories, phone lists, notice boards, or visible labels reveal sensitive targets or access information.

Related controls

• A.7.3 Securing Offices Rooms and Facilities
• A.6.8 Information Security Event Reporting

Checklist

• Sensitive rooms are not obviously labelled where this increases targeting risk.
• Public or visitor-facing directories do not reveal sensitive internal locations.
• Internal phone lists are not accessible to outsiders.
• Access codes are not written on whiteboards, doors, desks, or notice boards.
• Notice boards do not reveal sensitive projects, customer names, or response contacts unnecessarily.
• Reception material does not expose internal security or facility details.
• Findings are tracked to correction.

Findings table