Check List

Check physical and environmental security of secure areas

Purpose

To prevent unauthorized physical access, damage and interference to the organization’s premises and information.

Audit resources

Procedure

Verification

Document

Report of physical entry controls

Product

Detailed study list and method

-    Check if security perimeters (barriers such as walls, card controlled entry gates or manned reception desks) are used to protect areas that contain information and information processing facilities.

-    Check if secure areas are protected by appropriate entry controls to ensure that only authorized personnel are allowed access.

-    Check if physical security for offices, rooms, and facilities are designed and applied.

-    Check if physical protection against damage from fire, flood, earthquake, explosion, civil unrest, and other forms of natural or man-made disaster is designed and applied.

-    Check if physical protection and guidelines for working in secure areas are designed and applied.

-    Check if access points such as delivery and loading areas and other points where unauthorized persons may enter the premises are controlled and, if possible, isolated from information processing facilities to avoid unauthorized access.

-    Check if physical access to production gaming system data centers, computer rooms, network operations centers and other defined critical areas have a two-factor authentication process. Single-factor electronic access control methods