more of the following physical or more of the access methods: following physical access methods: Card Key: A means of Card Key: A means • electronic access where of electronic access the access rights of the where the access rights card holder are of the card holder are predefined in a predefined in a computer database. computer database. Access rights may Access rights may differ from one differ from one perimeter to another. perimeter to another. Special Locks: These Special Locks: These • include, but are not include, but are not limited to, locks with limited to, locks with “restricted key” “restricted key” systems, magnetic systems, magnetic locks that can be locks that can be operated remotely, and operated remotely, and “man-trap” systems. “man-trap” systems. Security Personnel: Security Personnel: • Personnel responsible Personnel responsible for controlling physical for controlling physical access who may reside access who may reside on-site or at a on-site or at a monitoring station. monitoring station. Other Authentication • Other Authentication Devices: Biometric, Devices: Biometric, keypad, token, or other keypad, token, or other equivalent devices that equivalent devices that control physical access control physical access to the Critical Cyber to the Critical Cyber Assets. Assets Monitoring Physical Access The Responsible Entity — R5 N/A N/A. N/A The Responsible Entity shall has not document and implement the documented or has not technical and procedural controls implemented for monitoring physical access at all access points to the Physical
more of the following physical access methods: Card Key: A means of electronic access where the access rights of the card holder are predefined in a computer database. Access rights may differ from one perimeter to another. Special Locks: These include, but are not limited to, locks with “restricted key” systems, magnetic locks that can be operated remotely, and “man-trap” systems. Security Personnel: Personnel responsible for controlling physical access who may reside on-site or at a monitoring station. Other Authentication Devices: Biometric, keypad, token, or other equivalent devices that control physical access to the Critical Cyber Assets or more of the following physical access methods: • Card Key: A means of electronic access where the access rights of the card holder are predefined in a computer database. Access rights may differ from one perimeter to another. • Special Locks: These include, but are not limited to, locks with “restricted key” systems, magnetic locks that can be operated remotely, and “man-trap” systems. • Security Personnel: Personnel responsible for controlling physical access who may reside on-site or at a monitoring station. • Other Authentication Devices: Biometric, keypad, token, or other equivalent devices that control physical access to the Critical Cyber Assets. R5 Monitoring Physical Access — The Responsible Entity shall document and implement the technical and procedural controls for monitoring physical access at all access points to the Physical N/A N/A. N/A The Responsible Entity has not documented or has not implemented
VSL_Matrix_Complete_2016_01_27.docx