Assessment Objective
Determine if:
- PE-02(02) two forms of identification are required from [Assignment: list of acceptable forms of identification] for visitor access to the facility where the system resides.
Assessment Methods
Examine
- Physical and environmental protection policy
- procedures addressing physical access authorizations
- list of acceptable forms of identification for visitor access to the facility where the system resides
- access authorization forms
- access credentials
- physical access control logs or records
- system security plan
- other relevant documents or records
Interview
- Organizational personnel with physical access authorization responsibilities
- organizational personnel with physical access to the system facility
- organizational personnel with information security responsibilities
Test
- Organizational processes for physical access authorizations
- mechanisms supporting and/or implementing physical access authorizations
Linkede sager
| Linktype | Sag |
|---|---|
| blocks | PE-02(02) Two Forms of Identification |