A CCTV camera over a cash office
A staff-only room where cash is counted or held. Staff are present and the public are not; the purpose (loss prevention) is usually clear, and the camera usually watches people at work closely.
- Members of the public present
- no
- Staff present
- yes
- A staff-only private area
- no
- Read from words such as
- cash office
- What the list usually carries
- the room name, and often a note on the safe or the counting table
Findings a camera here can raise
- 2 Behaviour or emotion alerts over an area where staff work, at an EU site
- 5 No retention period set, or retention above the maximum you set
- 6 No signage or notice recorded
- 7 Footage stored outside the site's region: who can access it there?
- 8 A third party can view or manage the footage, and no agreement is recorded
- 12 High-risk AI use in an EU workplace
- 13 No owner, or no list of who can view
- 14 Disclosures to police or insurers not logged
- 15 Covert camera
- 17 Workplace surveillance law named for this site
- 18 Employee records exemption: does it reach this footage?
Clauses this coverage adds
ISO/IEC 27001 A.7.4Physical security monitoringPhysical security monitoring. Premises are to be watched continuously for unauthorized physical entry. Purpose (stated in ISO/IEC 27002:2022): detects and deters unauthorized physical access. As an Annex A reference control, it is compared with the controls determined in risk treatment (6.1.3 c) and recorded in the Statement of Applicability as included or excluded, with the justification and implementation status (6.1.3 d); implementation guidance is ISO/IEC 27002:2022 7.4.
The example "cash office" in a covers column reads as this type. The words are matched whole: "public" in "publicly" does not match.