Physical access audit records

ISO 27001 does not prescribe records to be generated while managing physical access, but common records you should consider are:

• access rights granted to personnel
• access logs
• changes in access rights
• access review reports

This way you cover the main steps of access management: the definition of access rights, when they are used and changed, and when they are reviewed.

This article will provide you a further explanation about physical security:

• How to handle access control according to ISO 27001 https://advisera.com/27001academy/blog/2015/07/27/how-to-handle-access-control-according-to-iso-27001/

This material will also help you regarding physical security:

• Free online training ISO 27001 Foundations Course https://advisera.com/training/iso-27001-foundations-course/