Key takeaways
- Protect power and network cables from interception, interference or damage.
- Cables carry power and data; damage or tapping can interrupt service or leak information.
- Start here: route cables through protected conduits or secure areas.
Purpose
Protect power and network cables from interception, interference or damage.
Requirement
Requirement summaryCables carrying power, data or supporting information services shall be protected from interception, interference or damage.
Why it matters
Cables carry power and data; damage or tapping can interrupt service or leak information.
How to implement
- Route cables through protected conduits or secure areas.
- Separate power and data cables where interference is possible.
- Label and document cabling.
- Inspect cabling in shared spaces.
What evidence you need to provide
Here is what you will typically need to provide for Annex A 7.12. It does not matter which system it lives in: a document, screenshot or export is fine.
Documents to have ready
- Your requirements for protecting power and network cables.
- Your Statement of Applicability (SoA: the list of all 93 controls showing which you use and why) with A.7.12 marked as used or not used, a short reason, and its current status.
Records and examples to show
- Cable diagrams or labelling records.
- Records showing unused network points are switched off.
- Maintenance records for cabling work.
Things you should be able to show or explain
- Be able to show that cables are tidy, protected and not exposed in public areas.
How much to show: Your main equipment rooms.
Common mistakes
- Loose or unlabelled cables.
- Live network points in public areas.
- Patch panels in open areas.
- No cabling documentation.
- Tip: Lock comms cabinets.
Policies & documents to have
- Physical Security Policy
- Third-Party Management Policy
FAQ
Is A.7.12 mandatory?
Annex A controls are not automatically mandatory. You must consider every control and record in your Statement of Applicability whether it applies and why. In practice, most organisations include this one.
What will I need to show for A.7.12?
Be ready to explain how the control works in your organisation and to provide things like: Your requirements for protecting power and network cables…