Through appropriate design, control personnel or third parties working in a secure area. The following control objectives must be covered in the design of the premises:
•personnel (including third party support services personnel) are only aware of the activities within a secure area on a need-to-know basis;
•unsupervised working in secure areas is discouraged;
•unmanned secure areas are locked and locks periodically checked;
•all access is authorised, logged and monitored;
•the use of additional barriers and perimeters to control physical access between areas with different security requirements should be considered;
•the use of photographic, video, audio or other recording equipment in secure areas should be discouraged.