id: "AT-03(02)" title: "Physical Security Controls" family: "AT" family_name: "Awareness and Training" sort_id: "at-03.02" priority: "P2" implementation_level: "organization" parent: "AT-03" enhancement: True


Statement

Provide {{ insert: param, at-03.02_odp.01 }} with initial and {{ insert: param, at-03.02_odp.02 }} training in the employment and operation of physical security controls.

Guidance

Physical security controls include physical access control devices, physical intrusion and detection alarms, operating procedures for facility security guards, and monitoring or surveillance equipment.

Assessment Objective

{{ insert: param, at-03.02_odp.01 }} is/are provided with initial and refresher training {{ insert: param, at-03.02_odp.02 }} in the employment and operation of physical security controls.

Security and privacy awareness and training policy

procedures addressing security and privacy training implementation

security and privacy training curriculum

security and privacy training materials

system security plan

privacy plan

training records

other relevant documents or records

Organizational personnel with responsibilities for role-based security and privacy training

organizational personnel with responsibilities for employing and operating physical security controls