+CA-08(03) Facility Penetration Testing

CA-08(03) Facility Penetration Testing

Control

Employ a penetration testing process that includes [Assignement: frequency] [Selection(one-or-more): announced; unannounced] attempts to bypass or circumvent controls associated with physical access points to the facility.

Discussion

Penetration testing of physical access points can provide information on critical vulnerabilities in the operating environments of organizational systems. Such information can be used to correct weaknesses or deficiencies in physical controls that are necessary to protect organizational systems.

Assessment Objective

the penetration testing process includes [Assignement: frequency] [Selection(one-or-more): announced; unannounced] attempts to bypass or circumvent controls associated with physical access points to facility.

Assessment Method

Examine

Assessment, authorization, and monitoring policy procedures addressing penetration testing procedures addressing red team exercises assessment plan results of red team exercises penetration test report assessment report rules of engagement assessment evidence system security plan privacy plan other relevant documents or records

Interview

Organizational personnel with assessment responsibilities organizational personnel with information security and privacy responsibilities system/network administrators

1. Oversigt

1.1 Referencer

1.2 Identificerede krav

1.3 Relaterede reguleringer

2. Identificerede krav

Krav

3. Relaterede reguleringer

Reguleringer

Linkede sager

Sagslinks
is blocked by CA-08(03) Facility Penetration Testing – Assessment Procedure