Family 3.10 6 requirements
Physical Security.
Walls, doors, badges. And the people inside.
The big picture
Cloud-only ops still need physical security for the offices where CUI is viewed, edited, and discussed.
Theme 1
Authorise and monitor.
3.10.1 — 3.10.2Limiting physical access to authorised individuals and protecting the support infrastructure.
Theme 2
Escort and log.
3.10.3 — 3.10.5Escorting visitors, monitoring activity, and maintaining logs of physical access.
- 3.10.3 Escort Every Visitor. Visitors escorted and monitored at all times in CUI areas. Sign-in, badges, no exceptions. 3.10.4 Log Physical Access. Maintain audit logs of who accessed secured CUI areas and when. 3.10.5 Manage Keys and Badges. Inventory and control all physical access devices — keys, badges, cards, combinations.
Theme 3
Remote and mobile sites.
3.10.6 onlyEnforcing safeguards at alternate work sites — home offices and field locations.