Assessment Objective

Determine if:

• PE-06(02)[01] [Assignment: classes or types of intrusions] are recognized;
• PE-06(02)[02] [Assignment: response actions] are initiated using [Assignment: automated mechanisms].

Assessment Methods

Examine

• Physical and environmental protection policy
• procedures addressing physical access monitoring
• system design documentation
• system configuration settings and associated documentation
• system audit records
• list of response actions to be initiated when specific classes/types of intrusions are recognized
• system security plan
• privacy plan
• other relevant documents or records

Interview

• Organizational personnel with physical access monitoring responsibilities
• organizational personnel with information security and privacy responsibilities

Test

• Organizational processes for monitoring physical access
• automated mechanisms supporting and/or implementing physical access monitoring
• automated mechanisms supporting and/or implementing recognition of classes/types of intrusions and initiation of a response

Свързани задачи

• NIST -

  https://csrc.nist.gov/pubs/sp/800/53/r5/upd1/final