Does your organization implement physical security monitoring systems such as alarm systems, surveillance cameras, and security personnel?
Explanation
Physical security monitoring is essential to protect facilities, assets, and information from unauthorized access, theft, or damage. Effective monitoring typically includes a combination of alarm systems to detect intrusions, surveillance cameras to record activities, and security personnel to respond to incidents and maintain a visible security presence.
Evidence could include documentation of installed physical security systems (e.g., floor plans showing camera and alarm placement), security guard schedules or contracts with security service providers, photographs of monitoring equipment, or access to a security operations center where monitoring takes place.
Implementation Example
Monitor the physical environment using alarm systems, cameras, and security guards
ID: DE.CM-02.279
Context
- Function
- DE: DETECT
- Category
- DE.CM: Continuous Monitoring
- Sub-Category
- The physical environment is monitored to find potentially adverse events
Related questions
- Does your organization have a system in place to monitor DNS, BGP, and other critical network services for suspicious or malicious activities?
- Does your organization implement network monitoring controls to detect and alert on unauthorized endpoint connections to both wired and wireless networks?
- Does your organization have a process to regularly monitor facilities for unauthorized or rogue wireless networks?
- Does your organization regularly compare actual network traffic flows against established baselines to detect and investigate deviations?
- Does your organization continuously monitor network communications to detect changes in security postures as part of a zero trust architecture?
- Does your organization monitor physical access control logs for unusual patterns and failed access attempts?