[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"framework:iso-27001\u002Fa-7-2":3},{"item":4,"lessons":16,"controls":30,"related":48},{"family":5,"item":6,"code":7,"title":8,"citations":9,"publisher":10,"summary_md":11,"official_text":12,"official_attribution":12,"official_url":13,"link_label":14,"note":12,"updated_at":15},"iso-27001","a-7-2","Annex A 7.2","ISO\u002FIEC 27001:2022 Annex A 7.2: Physical entry",3,"International Organization for Standardization (ISO) and IEC","**What it asks for.** This control expects secure areas to be protected by appropriate entry controls and access points. The aim is to make sure only authorised people get physical access to the organisation's information and associated assets. It covers both permanent staff and visitors, as well as deliveries.\n\n**In practice.** Good practice means controlling who can enter secure areas through badges, locks or reception, logging entries, escorting visitors and reviewing access rights regularly. Delivery and loading areas are separated from sensitive areas. Auditors look for access lists, entry logs, visitor procedures and evidence that rights are removed when people leave.\n\n**Common gaps.** Common gaps are tailgating, access cards not revoked for leavers and contractors with long-term unescorted access. Visitor logs are often incomplete and nobody reviews who holds access to the most sensitive areas. Codes for keypads are also rarely changed.",null,"https:\u002F\u002Fwww.iso.org\u002Fstandard\u002F27001","See the standard at ISO","2026-10-18T15:18:43.664+00:00",{"total":9,"list":17},[18,22,26],{"slug":19,"title":20,"published_at":21},"insider-threat-hidden-recorder-found-in-openai-executive-conference-room","Insider Threat: Hidden Recorder Found in OpenAI Executive Conference Room","2026-10-14T04:20:18.348+00:00",{"slug":23,"title":24,"published_at":25},"openai-engineer-plants-hidden-recording-device-in-executive-conference-room","OpenAI Engineer Plants Hidden Recording Device in Executive Conference Room","2026-10-14T00:21:06.926+00:00",{"slug":27,"title":28,"published_at":29},"insider-threat-openai-employee-plants-audio-device-in-conference-room","Insider Threat: OpenAI Employee Plants Audio Device in Conference Room","2026-10-14T00:20:50.023+00:00",[31,35,40,44],{"slug":32,"name":33,"problem":34,"stories":9},"deception","Deception and honeypots","An attacker who gets in quietly can explore the network for weeks before any alarm goes off.",{"slug":36,"name":37,"problem":38,"stories":39},"endpoint-detection-response","Endpoint detection and response (EDR and XDR)","Malware and hands-on-keyboard attackers on laptops and servers get spotted and stopped.",1,{"slug":41,"name":42,"problem":43,"stories":39},"identity-governance","Identity governance and single sign-on","People who leave or change roles lose access everywhere at once, and forgotten accounts stop piling up.",{"slug":45,"name":46,"problem":47,"stories":39},"security-monitoring-siem","Security monitoring (SIEM)","Logs from everywhere end up in one place, with alerts that someone actually sees.",[49,53,58,62,66,72,77,81],{"family":50,"item":51,"code":52,"title":52,"together":9},"itil","overview","ITIL",{"family":54,"item":55,"code":56,"title":57,"together":9},"nist-800-53","ir-6","IR-6","Incident Reporting",{"family":54,"item":59,"code":60,"title":61,"together":9},"pe-3","PE-3","Physical Access Control",{"family":54,"item":63,"code":64,"title":65,"together":9},"ps-7","PS-7","External Personnel Security",{"family":67,"item":68,"code":69,"title":70,"together":71},"cis","6","Control 6","Access Control Management",2,{"family":73,"item":74,"code":75,"title":76,"together":71},"nist-csf","de-cm","DE.CM-1","Continuous Monitoring",{"family":54,"item":78,"code":79,"title":80,"together":71},"at-2","AT-2","Literacy Training and Awareness",{"family":67,"item":82,"code":83,"title":84,"together":71},"13","Control 13","Network Monitoring and Defense"]