Physical security policy

1. Purpose and Scope

1.1 This policy sets out Registers of Scotland (RoS) commitment to safeguarding physical security. It applies to our colleagues, contractors, building tenants and visitors accessing and using our premises. It also extends to our physical building infrastructure and information contained within our electronic assets.

2. Guiding principles

2.1 This policy seeks to safeguard people, assets and information within our buildings through suitable and proportionate physical security measures.

3. The policy

3.1 Physical security is an important control to prevent unauthorised physical access, damage, interference, or loss to any of our premises, information or assets.

3.2 RoS  will consider the appropriate layout and design of facilities, combined with suitable security measures, to prevent any unauthorised access to our buildings, to protect all building users, information, materials, and infrastructure as is reasonably practicable.

3.3 RoS will put into place, or build into the design, measures that prevent, deter, delay, and detect attempted or actual unauthorised access, acts of damage, disorder, theft and/or violence in our buildings (so far as is reasonably practicable).

3.5 The required physical security controls will depend on different factors such as the nature or level of identified threats and vulnerabilities, the cost effectiveness of the associated controls, the building and it's surrounding environment, whether it is sole or shared occupancy or has public access requirements.

4. Roles and responsibilities

4.1 RoS Estates are responsible for the content of this policy, it's approval and review. They are responsible for ensuring it's implementation in practice and for monitoring this over time. They are responsible for ensuring that appropriate procedures, guidelines, or standards required to support this are maintained and ownership for these assigned.

4.2 All colleagues, contractors, tenants and routine visitors should be aware of the Physical Security Policy and comply with the relevant procedures.

4.3 Colleagues or tenants who arrange for external visitors to attend our buildings are responsible for ensuring that these visitors are escorted, at all times, whilst onsite.

4.4 RoS Estates will ensure that this Policy and any supporting documentation is shared with our tenants, and that any changes are communicated with them in a timely manner.

5. Approval and review

5.1 This policy will be reviewed and approved by the RoS Information Security Assurance Group (ISAG) annually on an annual basis unless earlier review is required.