A.7.4 Physical security monitoring

Status: Not Applicable

Justification:

This control is not applicable because anDREa operates on a 100% fully remote work model and does not own, lease, or maintain any physical corporate premises, facilities, or asset storage locations. Because there are no physical corporate spaces to monitor, the requirement to implement continuous physical surveillance or physical access monitoring is outside the entity's operational scope. All monitoring activities are instead focused on logical access, identity verification, and cloud-based infrastructure security.