A CCTV camera over a entrance or exit
A door people come in or go out by. The camera sees everyone who enters, which is why a sign at the entrance does most of the notice work.
- Members of the public present
- yes
- Staff present
- yes
- A staff-only private area
- no
- Read from words such as
- main entrance
- What the list usually carries
- "entrance", "exit", "door" or a door number
Findings a camera here can raise
- 2 Behaviour or emotion alerts over an area where staff work, at an EU site
- 4 Public area monitored with no assessment recorded
- 5 No retention period set, or retention above the maximum you set
- 6 No signage or notice recorded
- 7 Footage stored outside the site's region: who can access it there?
- 8 A third party can view or manage the footage, and no agreement is recorded
- 12 High-risk AI use in an EU workplace
- 13 No owner, or no list of who can view
- 14 Disclosures to police or insurers not logged
- 15 Covert camera
- 17 Workplace surveillance law named for this site
- 18 Employee records exemption: does it reach this footage?
Clauses this coverage adds
ISO/IEC 27001 A.7.4Physical security monitoringPhysical security monitoring. Premises are to be watched continuously for unauthorized physical entry. Purpose (stated in ISO/IEC 27002:2022): detects and deters unauthorized physical access. As an Annex A reference control, it is compared with the controls determined in risk treatment (6.1.3 c) and recorded in the Statement of Applicability as included or excluded, with the justification and implementation status (6.1.3 d); implementation guidance is ISO/IEC 27002:2022 7.4.
The example "main entrance" in a covers column reads as this type. The words are matched whole: "public" in "publicly" does not match.