Assessment Objective

Determine if:

• PE-06(01)[01] physical access to the facility where the system resides is monitored using physical intrusion alarms;
• PE-06(01)[02] physical access to the facility where the system resides is monitored using physical surveillance equipment.

Assessment Methods

Examine

• Physical and environmental protection policy
• procedures addressing physical access monitoring
• physical access logs or records
• physical access monitoring records
• physical access log reviews
• system security plan
• privacy plan
• privacy impact assessment
• privacy risk assessment documentation
• other relevant documents or records

Interview

• Organizational personnel with physical access monitoring responsibilities
• organizational personnel with incident response responsibilities
• organizational personnel with information security and privacy responsibilities

Test

• Organizational processes for monitoring physical intrusion alarms and surveillance equipment
• mechanisms supporting and/or implementing physical access monitoring
• mechanisms supporting and/or implementing physical intrusion alarms and surveillance equipment

Ticket collegati

• NIST -

  https://csrc.nist.gov/pubs/sp/800/53/r5/upd1/final