Assessment Objective
Determine if:
- PE-06(04) physical access to the system is monitored in addition to the physical access monitoring of the facility at [Assignment: physical spaces].
Assessment Methods
Examine
- Physical and environmental protection policy
- procedures addressing physical access monitoring
- physical access control logs or records
- physical access control devices
- access authorizations
- access credentials
- list of areas within the facility containing concentrations of system components or system components requiring additional physical access monitoring
- system security plan
- privacy plan
- privacy impact assessment
- privacy risk assessment documentation
- other relevant documents or records
Interview
- Organizational personnel with physical access monitoring responsibilities
- organizational personnel with information security and privacy responsibilities
Test
- Organizational processes for monitoring physical access to the system
- mechanisms supporting and/or implementing physical access monitoring for facility areas containing system components
Ticket collegati
| Tipo di collegamento | Ticket |
|---|---|
| blocks | PE-06(04) [H] Monitoring Physical Access to Systems |