Guide to ISO 27001 Physical and Environmental Security

Information security is often considered in terms of cyber threats, such as criminal hacking and fraud, but it’s just as much about physical and environmental risks. This includes things such as the improper disposal of physical records, unauthorised personnel in the premises and property damage. ISO 27001, the international standard for information security, contains a framework for addressing these risks. The guidance can be found in Annex 11. In this blog we break down each of its six sections and …

guide iso iso 27001 physical security