Utilities, environmental threats and physical access

Catalog reference

Prevent loss, damage or compromise of your systems, and interruption of your operations, from failure of supporting utilities such as power, telecommunications, water, gas, sewage and climate control. Where fitting, protect installations against outages, use redundancy, protect power and telecommunications cabling from interception and damage, monitor the utilities and report events beyond set thresholds, contract emergency supply such as generator fuel, and keep the power, temperature, humidity and connectivity systems effective, monitored, maintained and tested. Prevent or limit the effect of physical and environmental threats such as natural disasters, with protective measures, minimum and maximum control thresholds, and monitoring of environmental parameters. Prevent and monitor unauthorised physical access to, damage to and interference with your systems: set security perimeters from your risk assessment, protect them with access controls and entry points, design the physical security of offices, rooms and facilities, and monitor premises for unauthorised access. Test, review and update these protections regularly and after significant incidents or changes. Decide this in only if the Account is one of the eleven entity types Implementing Regulation 2024/2690 covers: DNS service providers, top-level domain (TLD) name registries, cloud computing service providers, data centre service providers, content delivery network providers, managed service providers, managed security service providers, online marketplaces, online search engines, social networking service platforms, and trust service providers.

Narrative — how we satisfy this requirement