Assessment Objective
Determine if:
- PE-03(02) security checks are performed [Assignment: frequency] at the physical perimeter of the facility or system for exfiltration of information or removal of system components.
Assessment Methods
Examine
- Physical and environmental protection policy
- procedures addressing physical access control
- physical access control logs or records
- records of security checks
- security audit reports
- security inspection reports
- facility layout documentation
- system entry and exit points
- system security plan
- other relevant documents or records
Interview
- Organizational personnel with physical access control responsibilities
- organizational personnel with information security responsibilities
Test
- Organizational processes for physical access control to the facility and/or system
- mechanisms supporting and/or implementing physical access control for the facility or system
- mechanisms supporting and/or implementing security checks for the unauthorized exfiltration of information
Prepojené úlohy
| Typ prepojenia | Úloha |
|---|---|
| blocks | PE-03(02) Facility and Systems |