PR.AA-06:

PR.AA-06:

Physical access to assets is managed, monitored, and enforced commensurate with risk

Implementation Examples

Ex1:

Use security guards, security cameras, locked entrances, alarm systems, and other physical controls to monitor facilities and restrict access

Ex2:

Employ additional physical security controls for areas that contain high-risk assets

Ex3:

Escort guests, vendors, and other third parties within areas that contain business-critical assets