Physical Security (A. 11 Physical and environmental security) Server rooms, data centres and office areas from where the data controller’s data can poten- tially be accessed must be protected against unauthorised access. Physical access control must be implemented for all such locations. Unauthorised access must be prohibited through 24x7 monitoring and access limitation with an electronic access audit log. Clear identification, through appropriate means e.g. ID badges for all personnel and visi- tors accessing the premises should be established, as appropriate. Facilities must be equipped with relevant technical installations to ensure the availability of services.
