PE-6 Monitoring Physical Access
Description
Organizational incident response capabilities include investigations of and responses to detected physical security incidents. Security incidents include, for example, apparent security violations or suspicious physical access activities.
Suspicious physical access activities include, for example:
- accesses outside of normal work hours;
- repeated accesses to areas not normally accessed;
- accesses for unusual lengths of time; and
- out-of-sequence accesses.
Applicability
This Control applies to facilities that house moderate or high impact information resources.
Implementation
TAMU-CC facilities managers shall ensure audio-visual surveillance technology used to monitor physical access to information systems is used responsibly and within the intended scope of the purpose for such deployment, and transparent processes and controls are implemented for the use of such technology and any resulting recorded material:
- Monitors physical access to the facility where the information system resides to detect and respond to physical security incidents;
- Reviews physical access logs Quarterly and upon occurrence of events or potential indications of events; and
- Coordinates results of reviews and investigations with the organizational incident response capability.
Revision History
Last Updated: February 21, 2025
Previous Versions:
- June 29, 2023
- May 31, 2022
- March 25, 2021
- September 16, 2019