Physical Security Audit Work Program

The purpose of this sample document is to facilitate a review of the physical security of information processing and storage areas. Physical access to information processing and storage areas and their supporting infrastructure must be controlled to prevent, detect and minimize the effects of unintended access to these areas. The level of control imposed on these areas will reflect the nature of the importance of the information handled or supported by the area to corporate operations. If managed properly, physical security policies and procedures can provide the protection that they are designed to give while providing the security that is necessary to keep the resources around it safe from outside and inside threats.