A.7.12 Cabling security
Status: Not Applicable
Justification:
This control is not applicable because anDREa does not own, lease, or manage any physical office premises, corporate data centers, or localized telecommunications infrastructure requiring physical cable protection or routing controls. The organization operates on a 100% fully remote work model, utilizing third-party cloud-hosted infrastructure (SaaS/PaaS/IaaS) and public/private internet services for data transmission. As there are no physical premises or corporate-owned cabling networks within the entity's operational scope, traditional physical cable protection cannot be implemented. Risks related to data interception and interference over external networks are mitigated through logical controls, such as end-to-end encryption and secure remote access protocols governed under Control A.06.07 (Remote Working).