ISO/IEC 24383 ED1

Information technology - Physical network security for the accommodation of customer premises cabling infrastructure and information technology equipment

Scope

ISO/IEC 24383:2026 specifies requirements and recommendations providing security to the physical network comprising customer premises cabling in accordance with the ISO/IEC 11801 series, associated infrastructure and accommodation of information technology equipment.

The document covers the security of the ICT cables, pathways, spaces, and other infrastructure components of the ICT physical infrastructure to help provide protection of the ICT infrastructure from unauthorized access, tampering, or modifications.
The document addresses:
a) risk assessment guidelines;
b) design, planning, product selection and installation practices based on a required information sensitivity level;
c) intrusion detection, (treatments and controls); and
d) administration including automated infrastructure management (AIM).

This document applies to existing buildings and structures together with those being planned for construction.
The following are outside the scope of this document:
e) data protection methods such as encryption;
f) practices that address protection from non-contact cable tapping, audio, visual or RF snooping and other forms of unauthorized monitoring;
g) internal environmental events such as overheating, fire, electrostatic discharge, water impacting the function of the facility; and
h) external environmental events such as fire, flood, earthquake, explosion, lightning, and electromagnetic effects.