id: "PE-03(08)" title: "Access Control Vestibules" family: "PE" family_name: "Physical and Environmental Protection" sort_id: "pe-03.08" priority: "P2" implementation_level: "organization" parent: "PE-03" enhancement: True
Statement
Employ access control vestibules at {{ insert: param, pe-03.08_odp }}.
Guidance
An access control vestibule is part of a physical access control system that typically provides a space between two sets of interlocking doors. Vestibules are designed to prevent unauthorized individuals from following authorized individuals into facilities with controlled access. This activity, also known as piggybacking or tailgating, results in unauthorized access to the facility. Interlocking door controllers can be used to limit the number of individuals who enter controlled access points and to provide containment areas while authorization for physical access is verified. Interlocking door controllers can be fully automated (i.e., controlling the opening and closing of the doors) or partially automated (i.e., using security guards to control the number of individuals entering the containment area).
Assessment Objective
access control vestibules are employed at {{ insert: param, pe-03.08_odp }}.
Physical and environmental protection policy
procedures addressing physical access control
list of access control vestibules and locations
system security plan
other relevant documents or records
Organizational personnel with physical access control responsibilities
organizational personnel with information security responsibilities
Organizational processes for vestibules to prevent unauthorized access.