Annex A 7.1 of ISO/IEC 27001 : 2022 is a control that requires an organization to define and implement security perimeters and use them to protect areas that contain information and other associated assets. Information and information security assets can include data, infrastructure, software, hardware, and personnel. The main purpose of this control is to prevent unauthorized physical access, damage, and interference to these assets, which could compromise the confidentiality, integrity, and availability of the information. Physical security perimeters can include fences, walls, gates, locks, alarms, cameras, and other barriers or devices that restrict or monitor access to the facility or area. The organization should also consider the environmental and fire protection of the assets, as well as the disposal of any waste or media that could contain sensitive information.
ISO/IEC 27001 : 2022 Lead Implementer Study Guide, Section 5.3.1.7, page 101
ISO/IEC 27001 : 2022 Lead Implementer Info Kit, page 17
ISO/IEC 27002 : 2022, Control 7.1 – Physical Security Perimeters123
