03.10: Physical Protection

Develop, approve, and maintain a list of individuals with authorized access to the facility where the system resides. Issue authorization credentials for facility access. Review the facility access list [Assignment: organization-defined frequency]. Remove individuals from the facility access list when access is no longer required.

Monitor physical access to the facility where the system resides to detect and respond to physical security incidents. Review physical access logs [Assignment: organization-defined frequency] and upon occurrence of [Assignment: organization-defined events or potential indicators of events].

Determine alternate work sites allowed for use by employees. Employ the following security requirements at alternate work sites: [Assignment: organization-defined security requirements].

Enforce physical access authorizations at entry and exit points to the facility where the system resides by: Verifying individual physical access authorizations before granting access to the facility and Controlling ingress and egress with physical access control systems, devices, or guards. Maintain physical access audit logs for entry or exit points. Escort visitors, and control…

Control physical access to system distribution and transmission lines within organizational facilities.