ISO 27001:2022 7.4: Physical security monitoring

What else in your programme already covers this

This control maps to 59 controls across 41 other frameworks. If you already hold one of them, the evidence you collected for it is the starting point here rather than new work.

SOC 2 · 4 controls

SOC2-CC6.1 CC6.1 Logical access security over protected information assets
SOC2-CC6.4 CC6.4 Restricting physical access to facilities and assets
SOC2-CC7.1 CC7.1 Detecting configuration changes and new vulnerabilities
SOC2-CC7.2 CC7.2 Monitoring system components for anomalies

C5 (Germany) · 3 controls

C5-PS-03 Perimeter Protection
C5-PS-04 Physical site access control
C5-PS-07 Surveillance of operational and environmental parameters

CMMC 2.0 · 3 controls

CA.L2-3.12.3 Security Control Monitoring
PE.L2-3.10.2 Monitor Facility
PE.L2-3.10.4 Physical Access Logs

CNIL Guidance on Employee Monitoring and Workplace Video Surveillance · 2 controls

VID-1 VID-1 Install cameras only for a defined, lawful and legitimate purpose
VID-2 VID-2 Point cameras at entrances, exits, emergency exits, circulation routes and storage areas, not at workstations

Cloud Security Alliance Cloud Controls Matrix (CCM) v4.0.1 · 2 controls

CCM-DCS-10 Surveillance System
CCM-LOG-12 Access Control Logs

FedRAMP High · 2 controls

PE-6 Monitoring Physical Access
PE-6(1) Monitoring Physical Access | Intrusion Alarms and Surveillance Equipment (PE-6(1))

FedRAMP Moderate · 2 controls

PE-6 Monitoring Physical Access
PE-6(1) Monitoring Physical Access | Intrusion Alarms and Surveillance Equipment (PE-6(1))

HIPAA Security Rule · 2 controls

164.310(a)(1) Facility Access Controls (Standard)
164.310(a)(2)(ii) Facility Security Plan (Addressable)

Italy Workers' Statute (Law 300/1970) · 2 controls

Art. 2(1)-(2) Art. 2(1)-(2) Use sworn security guards only to protect company assets
Art. 4(1) Art. 4(1) Install remote-monitoring equipment only for permitted purposes and after a union agreement or labour inspectorate authorisation

NIST Cybersecurity Framework 2.0 · 2 controls

NIST-CSF-DE.CM-02 The physical environment is monitored to find potentially adverse events
NIST-CSF-PR.AA-06 Physical access to assets is managed, monitored, and enforced commensurate with risk

NIST SP 800-53 Rev 5 · 2 controls

NIST800-PE-6 PE-6 Monitoring Physical Access
SP800-53-PE Physical and Environmental Protection Family

NIST SP 800-66 Rev 2 · 2 controls

164.310(a)(1) Facility Access Controls (Standard)
164.310(a)(2)(ii) Facility Security Plan (Addressable)

PCI DSS 4.0 · 2 controls

9.2.1.1 9.2.1.1 Monitoring of entry to sensitive areas
9.5.1.2 9.5.1.2 Periodic inspection of POI device surfaces

API 1164 · 1 control

API1164-14 Physical Security

Authorised Economic Operator (AEO) Programmes - Global Standards · 1 control

AEO-5 Premises Security

C-TPAT - Customs-Trade Partnership Against Terrorism · 1 control

CTPAT-MSC-9 Physical Security

CFTC System Safeguards (17 CFR 37, 38, 39, 49) · 1 control

CFTC-SS-6 Physical Security and Environmental Controls Category

CISA Industrial Control Systems (ICS) Security Guidance · 1 control

CISA-ICS-DID-23 Physical Security

COBIT 2019 · 1 control

DSS05.05 DSS05.05 Manage physical access to I&T assets

DORA · 1 control

DORA-Art.9 Protection and prevention

EBA Guidelines on ICT and Security Risk Management (EBA/GL/2019/04) · 1 control

EBA-GL-3.4.3 Physical security

EIOPA Guidelines on ICT Security and Governance (EIOPA-BoS-20/600) · 1 control

EIOPA-ICTSG-GL.9 Physical security

ISO 27701:2019 · 1 control

7.4 Privacy by design and privacy by default

ISO 50001:2018 - Energy Management Systems · 1 control

7.4 Communication

ISO/IEC 42001:2023 · 1 control

7.4 Communication

Italy Personal Data Protection Code (Legislative Decree No. 196/2003, amended 2018) · 1 control

Art. 114 Art. 114 Apply the Workers' Statute art. 4 guarantees to any remote monitoring

NIST SP 800-161 Rev 1 · 1 control

161R1-PE-6 Monitoring Physical Access

NIST SP 800-171 Rev 3 · 1 control

03.10.02 Monitoring Physical Access

Netherlands Works Councils Act (WOR) · 1 control

27(1)(l) Art. 27(1)(l) Obtain the works council's consent to a staff arrangement: personnel tracking systems (monitoring of presence, behaviour or performance)

Protective Security Policy Framework (PSPF) Release 2026 · 1 control

PSPF24-4 Physical Security

UK ICO Guidance on Video Surveillance including CCTV (2022) · 1 control

P.12 P.12 Secure storage and viewing: restricted access, encryption or equivalents, secure cloud and transfers, monitors visible only to authorised staff

Every mapping shown was judged rather than inferred from wording similarity, and the ones that failed review are published too. See the coverage reports and what was rejected.

You are reading one control. How much of ISO 27001:2022 have you already done?

ISO 27001:2022 7.4 is one control. If you already hold one of the frameworks below, a reviewed crosswalk already says how much of ISO 27001:2022 your existing evidence covers. Hold NIST SP 800-53 Rev 5 and 79 of 93 ISO 27001:2022 controls already carry evidence.

If you hold NIST SP 800-53 Rev 584.9% covered · 14 gaps If you hold ISO 27001:201383.9% covered · 15 gaps If you hold FedRAMP Moderate80.6% covered · 18 gaps If you hold Cloud Security Alliance Cloud Controls Matrix (CCM) v4.0.174.2% covered · 24 gaps If you hold C5 (Germany)69.9% covered · 28 gaps If you hold NIST Cybersecurity Framework 2.063.4% covered · 34 gaps

Each report names every control your existing framework evidences, every one it does not, the reasoning behind each claim, and the claims that were argued against and rejected. 170 were rejected on the NIST SP 800-53 Rev 5 pair alone.

See the released pairs, $299 each Browse the graph free