Cables that carry power, data or supporting information services are to be protected from interception, interference and damage. Purpose: keep cabling problems from causing information or assets to be lost, stolen, harmed or compromised, or from halting operations. Guidance: consider running power and telecommunications lines into processing facilities underground where possible, or otherwise protecting them adequately (for example floor cable protectors or poles), and shielding buried cables from accidental cuts with armoured conduit or markers; keeping power and communications cables apart to prevent interference; and labelling each end of every cable with enough source and destination detail for it to be physically identified and inspected. For sensitive or critical systems, consider armoured conduit, and locked, alarmed rooms or enclosures wherever cables can be inspected or terminate, electromagnetic shielding, periodic technical sweeps and physical inspections to find unauthorized devices attached to cables, access control on patch panels and cable rooms using keys or PINs, and fibre-optic cabling. Seek specialist advice on managing risks from cabling incidents or faults. Other information: co-located premises sometimes share power and telecommunications cabling between organizations.
This control maps to 30 controls across 14 other frameworks. If you already hold one of them, the evidence you collected for it is the starting point here rather than new work.
Every mapping shown was judged rather than inferred from wording similarity, and the ones that failed review are published too. See the coverage reports and what was rejected.
ISO 27002:2022 7.12 is one control. If you already hold one of the frameworks below, a reviewed crosswalk already says how much of ISO 27002:2022 your existing evidence covers. Hold NIST SP 800-53 Rev 5 and 79 of 93 ISO 27002:2022 controls already carry evidence.
Each report names every control your existing framework evidences, every one it does not, the reasoning behind each claim, and the claims that were argued against and rejected. 180 were rejected on the NIST SP 800-53 Rev 5 pair alone.
The graph holds this control, the 30 it maps to, and the evidence behind each claim, over MCP and REST.