03.10.02 Monitoring Physical Access

Statement

• a. Monitor physical access to the facility where the system resides to detect and respond to physical security incidents.

• b. Review physical access logs {{ insert: param, A.03.10.02.ODP.01 }} and upon occurrence of {{ insert: param, A.03.10.02.ODP.02 }}.

Guidance

A facility can include one or more physical locations containing systems or system components that process, store, or transmit CUI. Physical access monitoring includes publicly accessible areas within organizational facilities. Examples of physical access monitoring include guards, video surveillance equipment (i.e., cameras), and sensor devices. Reviewing physical access logs can help to identify suspicious activities, anomalous events, or potential threats. The reviews can be supported by audit logging controls if the access logs are part of an automated system. Incident response capabilities include investigations of physical security incidents and responses to those incidents. Incidents include security violations or suspicious physical access activities, such as access outside of normal work hours, repeated access to areas not normally accessed, access for unusual lengths of time, and out-of-sequence access.

Assessment objective

physical access to the facility where the system resides is monitored to detect physical security incidents.

Assessment objective

physical security incidents are responded to.

Assessment objective

physical access logs are reviewed {{ insert: param, A.03.10.02.ODP.01 }} .

Assessment objective

physical access logs are reviewed upon occurrence of {{ insert: param, A.03.10.02.ODP.02 }}.

Assessment method

• physical protection policy and procedures procedures for physical access monitoring physical access logs or records physical access monitoring records physical access log reviews system security plan other relevant documents or records

Assessment method

• personnel with physical access monitoring responsibilities personnel with incident response responsibilities personnel with information security responsibilities

Assessment method

• processes for monitoring physical access mechanisms for supporting or implementing physical access monitoring mechanisms for supporting or implementing the review of physical access logs

1. Oversigt

1.1 Referencer

1.2 Identificerede krav

1.3 Relaterede reguleringer

2. Identificerede krav

3. Relaterede reguleringer

Linkede sager

• NIST -

  https://csrc.nist.gov/pubs/sp/800/53/r5/upd1/final