A.7.8 Equipment siting and protection
Status: Not Applicable
Justification:
This control is not applicable because anDREa does not own, lease, or operate any physical premises, data centers, or corporate facilities where organizational equipment is centrally sited or managed. The company operates on a 100% fully remote work model. Because there are no physical corporate facilities to secure, traditional equipment siting and environmental perimeter controls cannot be implemented. Physical security and environmental risks to individual endpoint devices used by remote personnel are managed and governed under Control A.06.07 (Remote Working).