Physical Security IT Standard

The purpose of this standard is to set out the Robust physical and environmental controls that must exist to protect information assets and systems from unauthorized access and safeguard against environmental threats. This IT cybersecurity standard sets out the rules for the protection of information systems from physical and environmental threats to ensure the confidentiality, integrity, and availability of the data contained within the physical environment.

This standard applies to all users of [Company Name] Information and Communication Technology resources – including (but not limited to) staff (including casuals and volunteers), consultants and contractors, third parties, agency staff, and visitors to the Company.

Appropriate data security controls reduce the likelihood (and impact) of data breach incidents during various phases of the data lifecycle. The purpose of this standard is to set out the rules for securing the companies' data during transmission and storage. This document provides best practice recommendations on information security management for use by those responsible for initiating, implementing or maintaining information security management systems (ISMS).

Nowadays, with the digitalization of our society, the need for data protection became more important. The latest IT Security Standards involve the application of technology to broader social and institutional contexts, and thereby contributes to the servitization of companies, and affects how they compete and interact. This document contains security technology solutions to protect data classified as “Highly Sensitive”, “Sensitive”, “Private” or “Public” as per the Data Classification Standard and Data Handling Guidelines. Specifically: