CCI-000930

Employ guards to control every physical access point to the facility where the system resides 24 hours per day, 7 days per week.

Implementation Guidance

The organization being inspected/assessed employs guards and/or alarms to monitor every physical access point to the facility where the information system resides 24 hours per day, 7 days per week. The organization must create and maintain a list of guards or alarms for every physical access point to the facility where the information system resides 24 hours per day, 7 days per week.

Validation Procedures

The organization conducting the inspection/assessment obtains the list of guards or alarms for every physical access point to the facility where the information system resides and visually verifies a sampling of access points to ensure the appropriate guard or alarm to monitor is in place 24 hours per day, 7 days per week.

Compelling Evidence

1.) Documentation of the list of guards that have physical access to the facility and/or noted alarm equipment in use

The controls below (if any) were marked by NIST as being related to CCI-000930.