Physical Security Policy

All your company policies and legal agreements in one platform

What is a Physical Security Policy?

Use the Physical Security Policy to outline how your Company protects resources from harm and outline the parameters you use to control access to those resources. The policy details the framework and procedures for granting, monitoring and removing physical access to company premises to ensure the safety and security of the team, guests and company assets.

Prospective clients will require evidence that the processes and controls you have in place to protect your services and data are fit for purpose. The Physical Security Policy covers your physical space and also maintains the latest information on each of the largest cloud service providers (CSPs) data centres, such as AWS, Google or Azure. So even if you are using one of the large CSPs, the Physical Security Policy has you covered.

What is the purpose of the Physical Security Policy?

Small or large, it is important that you protect your Company’s physical buildings, whether that’s the people space that provides a safe, secure environment for your staff or your data centres that provide the resilience needed to deliver continuity of service to your clients.

Physical security policies and procedures are part of the InfoSec policies a company needs to evidence their reputation and posture, and also part of the policies required for ISO 27001 certification.

Physical Security Policy Sections

The role of staff in protecting your premises

Office access controls

CCTV

Data centre access controls

Physical Security Policy ISO 27001

Physical Security policies and procedures are part of the requirements of the ISO 27001 Certification standard. Both Physical and Environmental security are addressed in the ISO 27001 audits, so it is really important for a company working towards that certification to have both of them covered.

Physical Security Policy Related

Also known as: physical and environmental security policy, physical security policy and procedures, physical security policies, physical security policies and procedures, corporate physical security policy.

Related terms: corporate physical security, security perimeter, office access controls, CCTV, data centre access controls

References: ISO 27001