A.7.3 Securing offices, rooms and facilities

Status: Not Applicable

Justification:

This control is not applicable because anDREa operates on a 100% fully remote work model and does not possess, lease, or maintain any physical offices, server rooms, or physical facilities. All corporate data and systems are hosted entirely within cloud-based infrastructures. As there are no physical organizational premises to design or secure, the requirement to implement internal physical facility controls does not apply to the entity's operational framework.