ISO 27001:2022 7.5: Protecting against physical and environmental threats

What else in your programme already covers this

This control maps to 47 controls across 17 other frameworks. If you already hold one of them, the evidence you collected for it is the starting point here rather than new work.

NIST SP 800-53 Rev 5 · 8 controls

NIST800-PE-1 PE-1 Policy and Procedures
NIST800-PE-10 PE-10 Emergency Shutoff
NIST800-PE-13 PE-13 Fire Protection
NIST800-PE-14 PE-14 Environmental Controls
NIST800-PE-15 PE-15 Water Damage Protection
NIST800-PE-18 PE-18 Location of System Components
NIST800-PE-23 PE-23 Facility Location
SP800-53-PE Physical and Environmental Protection Family

FedRAMP High · 5 controls

PE-13 Fire Protection
PE-13(1) Fire Protection | Detection Systems: Automatic Activation and Notification (PE-13(1))
PE-14 Environmental Controls
PE-15 Water Damage Protection (PE-15)
PE-9 Power Equipment and Cabling (PE-9)

FedRAMP Moderate · 5 controls

PE-13 Fire Protection
PE-13(1) Fire Protection | Detection Systems: Automatic Activation and Notification (PE-13(1))
PE-14 Environmental Controls
PE-15 Water Damage Protection (PE-15)
PE-9 Power Equipment and Cabling (PE-9)

C5 (Germany) · 4 controls

C5-PS-01 Physical Security and Environmental Control Requirements
C5-PS-05 Protection from fire and smoke
C5-PS-06 Protection against interruptions caused by power failures and other such risks
C5-PS-07 Surveillance of operational and environmental parameters

HIPAA Security Rule · 4 controls

164.308(a)(7)(ii)(B) Disaster Recovery Plan (Required)
164.310(a)(1) Facility Access Controls (Standard)
164.310(a)(2)(i) Contingency Operations (Addressable)
164.310(a)(2)(ii) Facility Security Plan (Addressable)

NIST SP 800-66 Rev 2 · 4 controls

164.308(a)(7)(ii)(B) Disaster Recovery Plan (Required)
164.310(a)(1) Facility Access Controls (Standard)
164.310(a)(2)(i) Contingency Operations (Addressable)
164.310(a)(2)(ii) Facility Security Plan (Addressable)

CMMC 2.0 · 3 controls

PE.L2-3.10.1 Limit Physical Access
PE.L2-3.10.2 Monitor Facility
PE.L2-3.10.6 Alternative Work Sites

ISO 27701:2019 · 3 controls

6.8 Physical and environmental security
6.8.1 Secure areas
6.8.2 Equipment

Cloud Security Alliance Cloud Controls Matrix (CCM) v4.0.1 · 2 controls

CCM-DCS-13 Environmental Systems
CCM-DCS-15 Equipment Location

SOC 2 · 2 controls

SOC2-A1.2 A1.2 Environmental protection, backup and recovery infrastructure
SOC2-CC6.4 CC6.4 Restricting physical access to facilities and assets

CFTC System Safeguards (17 CFR 37, 38, 39, 49) · 1 control

CFTC-SS-6 Physical Security and Environmental Controls Category

COBIT 2019 · 1 control

DSS01.04 DSS01.04 Manage the environment

ISO 27001:2013 · 1 control

A.11.1.4 Protecting against external and environmental threats

ISO 27002:2022 · 1 control

7.5 Protecting against physical and environmental threats

NIS2 Directive · 1 control

Art.21.1 Take proportionate all-hazards measures calibrated to the entity's own risk exposure

NIST Cybersecurity Framework 2.0 · 1 control

NIST-CSF-PR.IR-02 The organization's technology assets are protected from environmental threats

Every mapping shown was judged rather than inferred from wording similarity, and the ones that failed review are published too. See the coverage reports and what was rejected.

You are reading one control. How much of ISO 27001:2022 have you already done?

ISO 27001:2022 7.5 is one control. If you already hold one of the frameworks below, a reviewed crosswalk already says how much of ISO 27001:2022 your existing evidence covers. Hold NIST SP 800-53 Rev 5 and 79 of 93 ISO 27001:2022 controls already carry evidence.

If you hold NIST SP 800-53 Rev 584.9% covered · 14 gaps If you hold ISO 27001:201383.9% covered · 15 gaps If you hold FedRAMP Moderate80.6% covered · 18 gaps If you hold Cloud Security Alliance Cloud Controls Matrix (CCM) v4.0.174.2% covered · 24 gaps If you hold C5 (Germany)69.9% covered · 28 gaps If you hold NIST Cybersecurity Framework 2.063.4% covered · 34 gaps

Each report names every control your existing framework evidences, every one it does not, the reasoning behind each claim, and the claims that were argued against and rejected. 170 were rejected on the NIST SP 800-53 Rev 5 pair alone.

See the released pairs, $299 each Browse the graph free