By the SightShield team · · 3 min read
Two layers of security
Bangalore’s IT parks and SEZs — along Outer Ring Road, Whitefield, Electronic City, Manyata and beyond — provide campus security: gates, guards, boom barriers, lobby turnstiles and common-area CCTV. Inside, each tenant company is responsible for its own floor. Clients and auditors expect that inner layer to be controlled and documented, especially for offshore development centres serving overseas customers.
What the tenant typically owns
| Control | Typical implementation |
|---|---|
| Floor entry | Card or face readers, anti-tailgating at main doors |
| Internal zones | Separate access for ODCs, server rooms, labs, HR and finance |
| Visitor management | Pre-registration, ID check, badges, escort rules |
| CCTV | Entries, corridors, ODC doors, server rooms, reception |
| Retention | Often 90 days or as client contracts require |
| Logs and reviews | Access logs reviewed periodically, exports recorded |
ODC segregation
- Separate access-controlled area for each client project that requires it.
- Access granted only to project members, removed on release from the project.
- Cameras at ODC entrances, not over screens, so client data is not recorded on video.
- Clean desk rules, and restrictions on phones or storage devices where clients require.
- Regular access reviews with records kept for audits.
ISO 27001 and client audits
ISO 27001 and client security assessments include physical security controls: secure areas, entry controls, protection of equipment and monitoring. Auditors typically ask to see access lists, access logs, visitor records, CCTV coverage plans, retention settings and evidence of reviews. Systems that can produce these quickly make audits far easier.
SEZ considerations
SEZ units operate under customs supervision, so movement of goods — laptops, servers and other equipment — in and out of the zone is controlled and documented by the developer and authorities. Tenants should align internal asset movement records and gate passes with these procedures. The park’s security team usually handles the zone gate; the unit handles its own floor and assets.
CCTV design tips for tech offices
- Face-level cameras at every floor entry and emergency exit.
- Coverage of server and network rooms, and their doors.
- Avoid cameras that can read screens or whiteboards.
- Sync camera clocks with the network time source used for access logs.
- Keep CCTV on a separate network segment with restricted admin access.
Integration with the building
Tenant access systems often need to work with the park’s turnstiles and fire alarm. On a fire alarm, tenant doors on escape routes must release. Coordinate with the park’s facility team on card technology, fire interfaces and fit-out approvals early in the project.
Fire alarm systems for offices →An example
A 300-seat tenant in a Whitefield tech park set up face readers at its floor entries, separate access for two client ODCs and the server room, 48 cameras with 90-day retention, and visitor pre-registration linked to the park’s reception. At its next client audit, the team exported access logs, visitor records and camera coverage maps in an afternoon instead of a week.
Built for audits
We design access control and CCTV for IT and SEZ tenants with audit evidence in mind, and coordinate with park management on fit-out and fire interfaces.
Security for offices →Quick answers
Does the IT park’s security cover my office?+
The park covers the campus and common areas. Your floor, internal zones and records are your responsibility.
How long should CCTV be kept for client audits?+
Often 90 days, or as client contracts specify.
What is ODC segregation?+
A separately access-controlled area for a client project, with access only for project members.
Should cameras record screens in an ODC?+
No. Position cameras to see entrances and movement, not screens or whiteboards.
Can we use the park’s access cards for our doors?+
Often, if the card technology is compatible. Coordinate with the park facility team early in the fit-out.
Do we need anti-tailgating at our floor entry?+
Many tenants add it at main floor doors or ODC entrances where client contracts require strict one-person-per-card entry.
What do auditors ask for?+
Access lists and logs, visitor records, CCTV coverage, retention settings and evidence of reviews.