PE-03 [H] Physical Access Control – Assessment Procedure

Assessment Objective

Determine if:

PE-03a.
- PE-03a.01 physical access authorizations are enforced at [Assignment: entry and exit points] by verifying individual access authorizations before granting access to the facility;
- PE-03a.02 physical access authorizations are enforced at [Assignment: entry and exit points] by controlling ingress and egress to the facility using [Selection (one or more): [Assignment: systems or devices] ; guards];
PE-03b. physical access audit logs are maintained for [Assignment: entry or exit points];
PE-03c. access to areas within the facility designated as publicly accessible are maintained by implementing [Assignment: physical access controls];
PE-03d.
- PE-03d.[01] visitors are escorted;
- PE-03d.[02] visitor activity is controlled [Assignment: circumstances];
PE-03e.
- PE-03e.[01] keys are secured;
- PE-03e.[02] combinations are secured;
- PE-03e.[03] other physical access devices are secured;
PE-03f. [Assignment: physical access devices] are inventoried [Assignment: frequency];
PE-03g.
- PE-03g.[01] combinations are changed [Assignment: frequency] , when combinations are compromised, or when individuals possessing the combinations are transferred or terminated;
- PE-03g.[02] keys are changed [Assignment: frequency] , when keys are lost, or when individuals possessing the keys are transferred or terminated.

Physical and environmental protection policy
procedures addressing physical access control
physical access control logs or records
inventory records of physical access control devices
system entry and exit points
records of key and lock combination changes
storage locations for physical access control devices
physical access control devices
list of security safeguards controlling access to designated publicly accessible areas within facility
system security plan
other relevant documents or records

Sagslinks
Linktype	Sag
blocks	PE-03 [H] Physical Access Control