CCI-002939

The organization monitors physical access to the facility where the information system resides to detect and respond to physical security incidents.

Implementation Guidance

The organization being inspected/assessed will implement monitoring procedures to ensure physical access intrusion alarms and surveillance equipment are actively monitored to detect and respond to all physical access security incidents.

Validation Procedures

The organization conducting the inspection/assessment obtains and examines the inspected organization's monitoring procedures addressing physical access monitoring. Organizational personnel with physical access monitoring responsibilities are to be interviewed. The objective of the reviews and interviews is to validate the organization is actively monitoring its physical access intrusion alarms and surveillance equipment to detect and respond to all physical access security incidents.

Compelling Evidence

1.) Facility access control policy and procedures, including a section on monitoring and response to physical access security incidents 2.) AAR for any physical access security incidents

The controls below (if any) were marked by NIST as being related to CCI-002939.