---

id: "PE-06(02)" title: "Automated Intrusion Recognition and Responses" family: "PE" family_name: "Physical and Environmental Protection" sort_id: "pe-06.02" priority: "P2" implementation_level: "organization" parent: "PE-06" enhancement: True

---

Statement

Recognize {{ insert: param, pe-06.02_odp.01 }} and initiate {{ insert: param, pe-06.02_odp.02 }} using {{ insert: param, pe-06.02_odp.03 }}.

Guidance

Response actions can include notifying selected organizational personnel or law enforcement personnel. Automated mechanisms implemented to initiate response actions include system alert notifications, email and text messages, and activating door locking mechanisms. Physical access monitoring can be coordinated with intrusion detection systems and system monitoring capabilities to provide integrated threat coverage for the organization.

Assessment Objective: {{ insert: param, pe-06.02_odp.01 }} are recognized;

Assessment Objective: {{ insert: param, pe-06.02_odp.02 }} are initiated using {{ insert: param, pe-06.02_odp.03 }}.

Physical and environmental protection policy

procedures addressing physical access monitoring

system design documentation

system configuration settings and associated documentation

system audit records

list of response actions to be initiated when specific classes/types of intrusions are recognized

system security plan

privacy plan

other relevant documents or records

Organizational personnel with physical access monitoring responsibilities

organizational personnel with information security and privacy responsibilities

Organizational processes for monitoring physical access

automated mechanisms supporting and/or implementing physical access monitoring

automated mechanisms supporting and/or implementing recognition of classes/types of intrusions and initiation of a response