Assessment Objective
Determine if:
- PE-02(03) unescorted access to the facility where the system resides is restricted to personnel with [Selection (one or more): security clearances for all information contained within the system; formal access authorizations for all information contained within the system; need for access to all information contained within the system; [Assignment: physical access authorizations] ].
Assessment Methods
Examine
- Physical and environmental protection policy
- procedures addressing physical access authorizations
- authorized personnel access list
- security clearances
- access authorizations
- access credentials
- physical access control logs or records
- system security plan
- other relevant documents or records
Interview
- Organizational personnel with physical access authorization responsibilities
- organizational personnel with physical access to the system facility
- organizational personnel with information security responsibilities
Test
- Organizational processes for physical access authorizations
- mechanisms supporting and/or implementing physical access authorizations
Свързани задачи
| Тип връзка | Задача |
|---|---|
| blocks | PE-02(03) Restrict Unescorted Access |