Cabling Security is associated with Power, telecommunication and network cabling carrying information are protected from interception and damage.

The statement is an accurate summary of the control objective for Cabling Security within the ISO/IEC 27001 framework. The standard specifies that power, telecommunications, and network cabling that carry data or support critical information services must be protected. The primary goals of this control are to prevent physical damage (accidental or malicious), interference that could degrade signal quality, and unauthorized interception (e.g., wiretapping) that could compromise confidentiality. The inclusion of power cabling is critical, as a loss of power can compromise the availability of information systems just as effectively as a data line being cut.

B. False: This option is incorrect. The statement accurately reflects the guidance provided in ISO/IEC 27002 for implementing the "Cabling security" control, which explicitly covers power and telecommunications cabling and aims to protect them from damage and interception.

1. ISO/IEC 27002:2022 Information security, cybersecurity and privacy protection — Information security controls.

Reference: Control 7.8, "Cabling security".

Quote/Paraphrase: The purpose is stated as: "To protect cabling for power, data or supporting information services from interception, interference or damage." The control guidance further details that "Power and telecommunications cabling that carries data or supports information services should be protected."

2. ISO/IEC 27002:2013 Information technology — Security techniques — Code of practice for information security controls.

Reference: Section 11.2.3, "Cabling security".

Quote/Paraphrase: The control objective states: "Power and telecommunications cabling carrying data or supporting information services should be protected from interception, interference or damage." This directly validates the question's statement.

3. Calder, A., & Watkins, S. (2019). IT Governance: An International Guide to Data Security and ISO 27001/ISO 27002 (7th ed.). Kogan Page.

Reference: Chapter 15, Physical and environmental security.

Paraphrase: The text explains that control A.11.2.3 (from the 2013 standard) is designed to prevent tapping, interference, or damage to both network and power cabling. It emphasizes that a secure perimeter is insufficient if an attacker can simply access unprotected cabling outside of it.