CCI-002939

Monitor physical access to the facility where the system resides to detect and respond to physical security incidents.

Implementation Guidance

Determine if physical access to the facility where the system resides is monitored to detect and respond to physical security incidents.

Validation Procedures

Examine: [SELECT FROM: Physical and environmental protection policy; procedures addressing physical access monitoring; physical access logs or records; physical access monitoring records; physical access log reviews; system security plan; other relevant documents or records]. Interview: [SELECT FROM: Organizational personnel with physical access monitoring responsibilities; organizational personnel with incident response responsibilities; organizational personnel with information security responsibilities]. Test: [SELECT FROM: Organizational processes for monitoring physical access; mechanisms supporting and/or implementing physical access monitoring; mechanisms supporting and/or implementing the review of physical access logs].

The controls below (if any) were marked by NIST as being related to CCI-002939.