ISO/IEC 27001 · Annex A 7.12

Cabling security

International Organization for Standardization (ISO) and IEC

Explanation

What it asks for. Protect cables carrying power, data or supporting information services from interception, interference or damage.

In practice. Power and communications cables are separated where needed to avoid interference, routed through protected conduits or underground where practical, and kept out of public areas. Patch panels and cable rooms are locked, cables are labelled, and documentation shows routes and connections so unexpected changes can be spotted. For highly sensitive sites, additional measures such as armoured conduit, inspection for unauthorised devices and fibre may be used. Auditors look for cabling records, locked distribution points and inspection evidence.

Common gaps. Cabling documentation is often missing or years out of date. Floor boxes, wall ports in public areas and unlocked comms cupboards give easy access to the network without anyone noticing.