CA-08(03) Facility Penetration Testing

Employ a penetration testing process that includes ca-08.03_odp.01 ca-08.03_odp.02 attempts to bypass or circumvent controls associated with physical access points to the facility.

Parameter ID Definition
ca-08.03_odp.01 frequency
ca-08.03_odp.02

Selection (one-or-more):

  • announced
  • unannounced

Baselines

Guidance

Penetration testing of physical access points can provide information on critical vulnerabilities in the operating environments of organizational systems. Such information can be used to correct weaknesses or deficiencies in physical controls that are necessary to protect organizational systems.

Related controls 2