Assessment Objective
Determine if:
- PE-03(01)[01] physical access authorizations to the system are enforced;
- PE-03(01)[02] physical access controls are enforced for the facility at [Assignment: physical spaces].
Assessment Methods
Examine
- Physical and environmental protection policy
- procedures addressing physical access control
- physical access control logs or records
- physical access control devices
- access authorizations
- access credentials
- system entry and exit points
- list of areas within the facility containing concentrations of system components or system components requiring additional physical protection
- system security plan
- other relevant documents or records
Interview
- Organizational personnel with physical access authorization responsibilities
- organizational personnel with information security responsibilities
Test
- Organizational processes for physical access control to the information system/components
- mechanisms supporting and/or implementing physical access control for facility areas containing system components
Linkede sager
| Linktype | Sag |
|---|---|
| blocks | PE-03(01) System Access |