A.7.9
    Physical Controls

    Security of assets off-premises

    Off-site assets should be protected.

    Purpose

    To prevent loss, damage, theft or compromise of assets off-premises.

    Implementation Guidance

    Require authorization for removing assets from premises

    Encrypt data on portable devices

    Use full-disk encryption on laptops

    Implement remote wipe capabilities

    Maintain inventory of assets taken off-premises

    Recommended Tools

    ISO 27001 Services from the Directory

    These providers can help you implement A.7.9 and achieve ISO 27001 certification.

    By the team behind ISMS Directory

    Implementing A.7.9 for a client?

    ISMS Copilot drafts policies, evidence, and SoA wording for A.7.9 Security of assets off-premises. Built for compliance professionals.

    Try ISMS Copilot free