Physical Security Policy


This policy ensures proper physical access security for all premises, work areas, and server rooms at Acuvate. (PHYSICAL-17 | Version 1.7 | Effective: 25-02-2026)

Physical Security Policy — Version 1.7 | February 2026

Document ID: PHYSICAL-17 | ISO 27001:2022 Compliant | Approved By: Jagan Jami (CISO)

5. Purpose

To ensure proper physical access security for all premises, work areas, and server rooms at Acuvate Software Pvt. Ltd. through biometric/facial recognition access controls and monitoring systems.

6. Scope

Applies to all employees, contractors, visitors, and vendor personnel accessing Acuvate premises at Hyderabad and UK locations.

7. Access Control Zones

  • IT Team: Access to all areas including biometric devices, server room, and network infrastructure
  • Facility Team: Access to main door IN/OUT and server room
  • All Other Teams: Access to main door IN/OUT only (general work area access)

8. Access Control Mechanisms

  • 24x7 security guard at building entrance
  • Facial recognition / biometric access for operations floor
  • CCTV monitoring at all entrances with 30-day footage retention
  • Visitor escort policy enforced; all visitors sign entry register
  • Server room requires separate biometric authentication

9. Access Lifecycle

  • New employee access provisioned upon HR confirmation
  • Access reviewed periodically; unused access revoked
  • Terminated employee access removed on last working day

10. Responsibilities

IT Department Head maintains biometric systems and this policy. Facility team maintains physical security infrastructure. Reviews conducted twice yearly.

Next Review Date: 25-02-2027 | Owner: IT Department / ISMS Team