Assessment Objective
Determine if:
- PE-02(01) physical access to the facility where the system resides is authorized based on position or role.
Assessment Methods
Examine
- Physical and environmental protection policy
- procedures addressing physical access authorizations
- physical access control logs or records
- list of positions/roles and corresponding physical access authorizations
- system entry and exit points
- system security plan
- other relevant documents or records
Interview
- Organizational personnel with physical access authorization responsibilities
- organizational personnel with physical access to system facility
- organizational personnel with information security responsibilities
Test
- Organizational processes for physical access authorizations
- mechanisms supporting and/or implementing physical access authorizations
Linked Issues
| Linktype | Issue |
|---|---|
| blocks | PE-02(01) Access by Position or Role |