Assessment Objective
Determine if:
- PE-06a. physical access to the facility where the system resides is monitored to detect and respond to physical security incidents;
- PE-06b.
- PE-06b.[01] physical access logs are reviewed [Assignment: frequency];
- PE-06b.[02] physical access logs are reviewed upon occurrence of [Assignment: events];
- PE-06c.
- PE-06c.[01] results of reviews are coordinated with organizational incident response capabilities;
- PE-06c.[02] results of investigations are coordinated with organizational incident response capabilities.
Assessment Methods
Examine
- Physical and environmental protection policy
- procedures addressing physical access monitoring
- physical access logs or records
- physical access monitoring records
- physical access log reviews
- system security plan
- other relevant documents or records
Interview
- Organizational personnel with physical access monitoring responsibilities
- organizational personnel with incident response responsibilities
- organizational personnel with information security responsibilities
Test
- Organizational processes for monitoring physical access
- mechanisms supporting and/or implementing physical access monitoring
- mechanisms supporting and/or implementing the review of physical access logs
Linked Issues
| Linktype | Issue |
|---|---|
| blocks | PE-06 [L] Monitoring Physical Access |