All services Physical Security

Test whether someone can walk in and reach your data.

Strong passwords don’t help if anyone can walk past reception. We assess your premises against ISO 27001 and 27002 physical controls and show you the gaps we find, with photos.

Request a Physical Security Evaluation
Walkthrough: weak points foundSample · synthetic data
Annotated floor plan of a 22-desk office with five numbered weak points Meeting Reception Open office IT closet Kitchen Shipping 1 2 3 4 5
  1. 1
    Shipping door

    Wedged open during deliveries. No badge reader, and no camera covers it.

  2. 2
    IT closet

    Keyed lock. Seven keys in circulation and no record of who holds them.

  3. 3
    Reception

    Live network port in the lobby, on the same network as staff computers.

  4. 4
    Open office

    5 of 22 computers left unlocked during the 18:30 walkthrough.

  5. 5
    Reception

    Visitor log kept. Four visitor badges not returned this month.

Checkpoints we assess, from the parking lot to the server room

  1. Parking and exteriorCamera coverage
  2. Side doorWedged open
  3. ReceptionNo badge check
  4. Office floorUnlocked screens
  5. Server roomShared key

Example assessment: four of five checkpoints had gaps.

What we check, mapped to ISO 27001 and 27002

  • Access and badgesWho can get in, where, and when. Lost and shared badges.
  • Doors and locksPropped doors, shared keys, weak locks.
  • CamerasCoverage, blind spots, who reviews the footage.
  • Visitors and receptionSign-in, escorts, badges returned.
  • Server and network roomsLocks, logs and who really has access.
  • Desks and screensUnlocked PCs, papers left out, open network jacks.
  • EnvironmentFire, water, power and temperature protection.
  • PoliciesWhat the rules say, and whether people follow them.

What you get

  1. Photo-documented findingsEach weak point photographed, with where it is and how to fix it.
  2. Ranked findingsWhat to fix first, and why it matters.
  3. Quick winsMany fixes cost little: a door closer, a lock, a rule.

How it works

  1. Scoping callWe agree on what is in scope, what is out, and what a good result looks like for you.
  2. The workThe expert who scoped it leads it, and keeps you posted on anything urgent.
  3. ReportFindings ranked by risk, with the fix for each, walked through with your team.
  4. Follow-upWe answer questions and check your fixes where it is part of the engagement.
Preparing for ISO 27001?A virtual CISO can fold these findings into your wider security program.Virtual CISO

Examples on this page are illustrative.

Request a Physical Security Evaluation

Tell us what's going on. The expert who would lead the work replies within 1–2 business days, in English or French.

Book a Free Consultation