Why it matters
Detects physical intrusion or tampering that a locked door alone wouldn't catch.
How a self-led small team implements it
Shared-building CCTV/alarm coverage is sufficient evidence if you don't operate your own facility.
What auditors expect to see
CCTV/alarm coverage confirmation.
Track A.7.4 in your own Statement of Applicability — mark it applicable, log your justification, and link it to the risk that drove it.
Start your ISMS