CCI-000934

The organization employs a penetration testing process that includes unannounced attempts to bypass or circumvent security controls associated with physical access points to the facility on an organization-defined frequency.

Implementation Guidance

Validation Procedures

The controls below (if any) were marked by NIST as being related to CCI-000934.