IT Management & Cyber Security

ISO 27001 Annex : A.11.2 Equipment Its objective is to avoid loss, damage, theft, or compromise of assets and disrupt the operations of the organization. A.11.2.1  Equipment Siting and Protection Control- To mitigate the risk of   environmental  hazards, risks, and unauthorized access, the equipment should be sited and secured. Implementation Guidance- To protect equipment, the following directives should be considered: In order to minimize unnecessary access in work areas, equipment should be sited; Information   processing facilities that handle sensitive information should be carefully positioned to reduce the risk of unauthorized persons viewing information during their use; In order to avoid unauthorized access, storage facilities should be secured; Objects requiring special protection should be protected to reduce the required level of overall protection; The   risk   of potential threats to the environment and physicality such as...