AT-3(2): Physical Security Controls

Control Family:

Awareness And Training

CSF v1.1 References:

Baselines:

(Not part of any baseline)

Next Version:

Control Statement

The organization provides [Assignment: organization-defined personnel or roles] with initial and [Assignment: organization-defined frequency] training in the employment and operation of physical security controls.

Supplemental Guidance

Physical security controls include, for example, physical access control devices, physical intrusion alarms, monitoring/surveillance equipment, and security guards (deployment and operating procedures). Organizations identify personnel with specific roles and responsibilities associated with physical security controls requiring specialized training.