CCI-002950

The organization monitors physical access to the information system in addition to the physical access monitoring of the facility as organization-defined physical spaces containing one or more components of the information system.

Implementation Guidance

The organization being inspected/assessed documents and implements a process to monitor physical access to the information system in addition to the physical access monitoring of the facility as physical spaces containing one or more components of the information system defined in PE-6 (4), CCI 2951. The organization must maintain records of monitoring.

Validation Procedures

The organization conducting the inspection/assessment obtains and examines the documented process as well as the records of monitoring to ensure the organization being inspected/assessed monitors physical access to the information system in addition to the physical access monitoring of the facility as physical spaces containing one or more components of the information system defined in PE-6 (4), CCI 2951.

Compelling Evidence

1.) Documentation of a process to monitor physical access to the information system 2.) Records of monitoring

The controls below (if any) were marked by NIST as being related to CCI-002950.