Assessment Objective
Determine if:
- PE-06(03)(a) video surveillance of [Assignment: operational areas] is employed;
- PE-06(03)(b) video recordings are reviewed [Assignment: frequency];
- PE-06(03)(c) video recordings are retained for [Assignment: time period].
Assessment Methods
Examine
- Physical and environmental protection policy
- procedures addressing physical access monitoring
- video surveillance equipment used to monitor operational areas
- video recordings of operational areas where video surveillance is employed
- video surveillance equipment logs or records
- system security plan
- privacy plan
- privacy impact assessment
- privacy risk assessment documentation
- other relevant documents or records
Interview
- Organizational personnel with physical access monitoring responsibilities
- organizational personnel with information security and privacy responsibilities
Test
- Organizational processes for monitoring physical access
- mechanisms supporting and/or implementing physical access monitoring
- mechanisms supporting and/or implementing video surveillance
Saincheisteanna nasctha
| Cineál naisc | Saincheist |
|---|---|
| blocks | PE-06(03) Video Surveillance |