Has your organization conducted a comprehensive physical security assessment of all facilities housing critical computing assets within the past 12 months?

Physical security vulnerabilities can compromise even the most robust digital security measures.

This assessment should identify potential physical access weaknesses, environmental threats (fire, flood, power issues), and evaluate the effectiveness of existing physical controls such as access cards, biometrics, security cameras, and guards.

The assessment should also evaluate resilience factors like backup power systems, cooling redundancies, and disaster recovery capabilities.

Evidence could include a formal physical security assessment report conducted by qualified personnel (internal or external), which documents identified vulnerabilities, risk ratings, and recommended remediation actions with implementation timelines.