CCI-000930

Employ guards to control every physical access point to the facility where the system resides 24 hours per day, 7 days per week.

Implementation Guidance

Determine if guards are employed to control [PE-03(03)_ODP; physical access points to the facility where the system resides are defined] to the facility where the system resides 24 hours per day, 7 days per week.

Validation Procedures

Examine: [SELECT FROM: Physical and environmental protection policy; procedures addressing physical access control; physical access control logs or records; physical access control devices; facility surveillance records; facility layout documentation; system entry and exit points; system security plan; other relevant documents or records]. Interview: [SELECT FROM: Organizational personnel with physical access control responsibilities; organizational personnel with information security responsibilities]. Test: [SELECT FROM: Organizational processes for physical access control to the facility where the system resides; mechanisms supporting and/or implementing physical access control for the facility where the system resides].

The controls below (if any) were marked by NIST as being related to CCI-000930.