ISO 27001 A.7.12: Cabling security

Create cable management standards that cover routing, protection, separation, and documentation. For data cables: route through secure areas wherever possible, avoiding public spaces and areas accessible to unauthorised people. Use enclosed cable trays, conduits, or raised floors. Where cables must pass through unsecured areas, put them in locked conduits and consider fibre optic or encrypted links instead of plain copper. Keep cables away from sources of electromagnetic interference. For power cables: separate them from data cables to prevent interference. Use the right cable gauges and specs for the power load. Install surge protectors and power conditioning at the equipment end. Route cables to avoid tripping hazards and damage. Label power cables clearly so maintenance teams can identify what is what. For critical or sensitive environments: use fibre optic cables - they resist electromagnetic interference and are harder to tap. Encrypt data traversing cables in unsecured areas. Consider port locks or seals on patch panels in shared or accessible locations. For very high-security environments, pressurised cable conduits that detect breaches are an option. Document your cable infrastructure. Create cable route diagrams showing where critical cables run. Label cables at both ends. Record cable types, specifications, and installation dates. Keep patch panel records up to date with current port assignments. Inspect the cable infrastructure periodically. Look for unauthorised connections or tapping devices. Verify cable integrity and routing. Check conduits and trays for damage. Confirm power and data cables are properly separated. Update documentation whenever anything changes.