Assessment Objective
Determine if:
- physical access to the facility where the system resides is monitored to detect physical security incidents.
- physical security incidents are responded to.
- physical access logs are reviewed [Assignment: frequency] .
- physical access logs are reviewed upon occurrence of [Assignment: events or potential indicators of events].
Assessment Methods
Examine
- physical protection policy and procedures
- procedures for physical access monitoring
- physical access logs or records
- physical access monitoring records
- physical access log reviews
- system security plan
- other relevant documents or records
Interview
- personnel with physical access monitoring responsibilities
- personnel with incident response responsibilities
- personnel with information security responsibilities
Test
- processes for monitoring physical access
- mechanisms for supporting or implementing physical access monitoring
- mechanisms for supporting or implementing the review of physical access logs
Pedidos ligados
| Tipo de ligação | Pedido |
|---|---|
| blocks | 03.10.02 Monitoring Physical Access |