SO-05—De-provisioning Physical Access
>Control Description
Physical access that is no longer required in the event of a termination or role change is revoked. If applicable, temporary badges are returned prior to exiting facility.
Theme
Process
Type
Preventive
Policy/Standard
Physical and Environmental Security Policy>Implementation Guidance
1. Design and document a process for temporary badges being returned prior to exiting the facility. 2. Ensure access is revoked in case of employee termination or role change.
>Testing Procedure
1. Inspect Physical Access Policy to determine whether it contains the requirement for temporary badges to be returned prior to exiting the facility. 2. Obtain evidence to ensure no physical access is active for the terminated employees or unnecessary physical access for employees with a change in their roles and responsibilities.
>Audit Artifacts
E-SO-08
E-SO-10
>Framework Mappings
Cross-framework mappings provided by Adobe CCF Open Source under Creative Commons License.
Ask AI
Configure your API key to use AI features.