3.10.5—Physical Protection - Derived
Derived Requirement
>Control Description
Control and manage physical access devices.
>Discussion
Physical access devices include keys, locks, combinations, and card readers.
>Cross-Framework Mappings
>Assessment Interview Topics
Questions assessors commonly ask
Process & Governance:
- •What policies govern controlling output devices (printers, copiers)?
- •What procedures prevent unauthorized CUI output?
- •Who is responsible for managing and monitoring output devices?
- •How do you address CUI left on printers or copiers?
- •What governance ensures output device security?
Technical Implementation:
- •What technical controls manage and restrict output devices?
- •How do you implement secure print release mechanisms?
- •What authentication is required for output device use?
- •How do you prevent CUI printing to unauthorized printers?
- •What logging tracks output device usage?
Evidence & Documentation:
- •Can you demonstrate output device access controls?
- •What logs track printing and copying activities?
- •Can you show secure print release implementation?
- •What evidence proves output devices are controlled?
- •What audit findings verify output device security compliance?
Ask AI
Configure your API key to use AI features.