Rev. 3 physical protection requirements: facility access lists, monitoring physical access, physical access control at entry and exit points, alternate work sites and protecting transmission lines.
Keeping an approved list of people authorized to enter the facility where the system resides, issuing access credentials, reviewing the list at a defined frequency and removing people who no longer need access.
Monitoring physical access to the facility to detect and respond to physical security incidents, and reviewing physical access logs at a defined frequency and after defined events.
Deciding which alternate work sites, such as employees' homes, may be used and which security requirements apply at them.
Enforcing physical access at facility entry and exit points: verifying authorizations, controlling ingress and egress, access logs, visitor escorts, securing keys and combinations and controlling output devices. New in Rev. 3, it absorbs Rev. 2's 3.10.3, 3.10.4 and 3.10.5.
Controlling physical access to system distribution and transmission lines, such as cabling, jacks and wiring closets, inside organizational facilities; new in Rev. 3.
Tell us what you're working on, whether it's a deployment, an audit, a security test or a cyber range. You'll speak with an engineer who can help you scope it.