03.10.02 Monitoring Physical Access

This policy establishes procedures for monitoring physical access to the facility housing the covered system to detect and respond to potential security incidents. It outlines requirements for reviewing physical access logs and defines actions to be taken upon the occurrence of specific events or potential indications of security events. This policy applies to all personnel, contractors, and visitors with authorized access to the facility.

• A.03.10.02.ODP[01]: the frequency at which to review physical access logs is defined.
• A.03.10.02.ODP[02]: events or potential indications of events requiring physical access logs to be reviewed are defined.
• A.03.10.02.a[01]: physical access to the facility where the system resides is monitored to detect physical security incidents.
• A.03.10.02.a[02]: physical security incidents are responded to.
• A.03.10.02.b[01]: physical access logs are reviewed .
• A.03.10.02.b[02]: physical access logs are reviewed upon occurrence of .