A.7.1 Physical Security Perimeters

Status: Not Applicable

Justification: > This control is not applicable because anDREa operates under a 100% fully remote work model and does not own, lease, or maintain any physical office locations, corporate headquarters, or server rooms. All corporate operations and data processing occur within secure, cloud-hosted environments (SaaS/PaaS/IaaS), and personnel access these services directly from remote home environments.

Consequently, traditional organizational physical security perimeters do not exist within the entity's operational scope. Physical security risks are instead mitigated through endpoint security controls, device encryption, and robust identity and access management (IAM) policies.