PE-6.4: Monitoring Physical Access to Systems

Physical and environmental protection policy

procedures addressing physical access monitoring

physical access control logs or records

physical access control devices

access authorizations

access credentials

list of areas within the facility containing concentrations of system components or system components requiring additional physical access monitoring

system security plan

privacy plan

privacy impact assessment

privacy risk assessment documentation

other relevant documents or records

Organizational personnel with physical access monitoring responsibilities

organizational personnel with information security and privacy responsibilities

Organizational processes for monitoring physical access to the system

mechanisms supporting and/or implementing physical access monitoring for facility areas containing system components