Assessment Objective

Determine if:

• PE-06(04) physical access to the system is monitored in addition to the physical access monitoring of the facility at [Assignment: physical spaces].

Assessment Methods

Examine

• Physical and environmental protection policy
• procedures addressing physical access monitoring
• physical access control logs or records
• physical access control devices
• access authorizations
• access credentials
• list of areas within the facility containing concentrations of system components or system components requiring additional physical access monitoring
• system security plan
• privacy plan
• privacy impact assessment
• privacy risk assessment documentation
• other relevant documents or records

Interview

• Organizational personnel with physical access monitoring responsibilities
• organizational personnel with information security and privacy responsibilities

Test

• Organizational processes for monitoring physical access to the system
• mechanisms supporting and/or implementing physical access monitoring for facility areas containing system components

Ticket collegati

• NIST -

  https://csrc.nist.gov/pubs/sp/800/53/r5/upd1/final