Organizational Control: Monitoring Physical Access

Control ID: PE-6 Monitoring Physical Access	Family: Physical and Environmental Protection	Source: NIST 800-53r4
Control: The organization: Monitors physical access to the facility where the information system resides to detect and respond to physical security incidents; Reviews physical access logs [Assignment: organization-defined frequency] and upon occurrence of [Assignment: organization-defined events or potential indications of events]; and Coordinates results of reviews and investigations with the organizational incident response capability.
Supplemental Guidance: Organizational incident response capabilities include investigations of and responses to detected physical security incidents. Security incidents include, for example, apparent security violations or suspicious physical access activities. Suspicious physical access activities include, for example: (i) accesses outside of normal work hours; (ii) repeated accesses to areas not normally accessed; (iii) accesses for unusual lengths of time; and (iv) out-of-sequence accesses. Related Controls: CA-7, IR-4, IR-8
Control Enhancements: (1) Monitoring Physical Access \| Intrusion Alarms / Surveillance Equipment The organization monitors physical intrusion alarms and surveillance equipment. Supplemental Guidance: Related Controls: N/A (4) Monitoring Physical Access \|Monitoring Physical Access to Information Systems The organization monitors physical access to the information system in addition to the physical access monitoring of the facility as [Assignment: organization-defined physical spaces containing one or more components of the information system]. Supplemental Guidance: This control enhancement provides additional monitoring for those areas within facilities where there is a concentration of information system components (e.g.,server rooms, media storage areas, communications centers). Related Controls: PS-2, PS-3
References: N/A
Mechanisms:
Protocol Implementation Conformance Statements: N/A