Assessment Objective
Determine if:
- PE-06(02)[01] [Assignment: classes or types of intrusions] are recognized;
- PE-06(02)[02] [Assignment: response actions] are initiated using [Assignment: automated mechanisms].
Assessment Methods
Examine
- Physical and environmental protection policy
- procedures addressing physical access monitoring
- system design documentation
- system configuration settings and associated documentation
- system audit records
- list of response actions to be initiated when specific classes/types of intrusions are recognized
- system security plan
- privacy plan
- other relevant documents or records
Interview
- Organizational personnel with physical access monitoring responsibilities
- organizational personnel with information security and privacy responsibilities
Test
- Organizational processes for monitoring physical access
- automated mechanisms supporting and/or implementing physical access monitoring
- automated mechanisms supporting and/or implementing recognition of classes/types of intrusions and initiation of a response
Powiązane zgłoszenia
| Typ powiązania | Zgłoszenie |
|---|---|
| blocks | PE-06(02) Automated Intrusion Recognition and Responses |