Digital Security Program (DSP)
| Control | Status | |
|---|---|---|
| Physical & Environmental Protections | Mechanisms exist to facilitate the operation of physical and environmental protection controls. | |
| Physical Access Authorizations | Physical access control mechanisms exist to maintain a current list of personnel with authorized access to organizational facilities (except for those areas within the facility officially designated as publicly accessible). | |
| Role-Based Physical Access | Physical access control mechanisms exist to authorize physical access to facilities based on the position or role of the individual. | |
| Physical Access Control | Physical access control mechanisms exist to enforce physical access authorizations for all physical access points (including designated entry/exit points) to facilities (excluding those areas within the facility officially designated as publicly accessible). | |
| Controlled Ingress & Egress Points | Physical access control mechanisms exist to limit and monitor physical access through controlled ingress and egress points. | |
| Physical Access Logs | Physical access control mechanisms generate a log entry for each access attempt through controlled ingress and egress points. | |
| Physical Security of Offices, Rooms & Facilities | Mechanisms exist to identify systems, equipment and respective operating environments that require limited physical access so that appropriate physical access controls are designed and implemented for offices, rooms and facilities. | |
| Working in Secure Areas | Physical security mechanisms exist to allow only authorized personnel access to secure areas. | |
| Monitoring Physical Access | Physical access control mechanisms exist to monitor for, detect and respond to physical security incidents. | |
| Intrusion Alarms / Surveillance Equipment | Physical access control mechanisms exist to monitor physical intrusion alarms and surveillance equipment. | |
| Monitoring Physical Access To Information Systems | Facility security mechanisms exist to monitor physical access to critical information systems or sensitive/regulated data, in addition to the physical access monitoring of the facility. | |
| Visitor Control | Physical access control mechanisms exist to identify, authorize and monitor visitors before allowing access to the facility (other than areas designated as publicly accessible). | |
| Visitor Access Revocation | Mechanisms exist to ensure visitor badges, or other issued identification, are surrendered before visitors leave the facility or are deactivated at a pre-determined time/date of expiration. | |
| Supporting Utilities | Facility security mechanisms exist to protect power equipment and power cabling for the system from damage and destruction. | |
| Automatic Voltage Controls | Facility security mechanisms exist to utilize automatic voltage controls for critical system components. | |
| Emergency Shutoff | Facility security mechanisms exist to shut off power in emergency situations by: (1) Placing emergency shutoff switches or devices in close proximity to systems or system components to facilitate safe and easy access for personnel; and (2) Protecting emergency power shutoff capability from unauthorized activation. | |
| Emergency Power | Facility security mechanisms exist to supply alternate power, capable of maintaining minimally-required operational capability, in the event of an extended loss of the primary power source. | |
| Emergency Lighting | Facility security mechanisms exist to utilize and maintain automatic emergency lighting that activates in the event of a power outage or disruption and that covers emergency exits and evacuation routes within the facility. | |
| Water Damage Protection | Facility security mechanisms exist to protect systems from damage resulting from water leakage by providing master shutoff valves that are accessible, working properly and known to key personnel. | |
| Fire Protection | Facility security mechanisms exist to utilize and maintain fire suppression and detection devices/systems for the system that are supported by an independent energy source. | |
| Fire Detection Devices | Facility security mechanisms exist to utilize and maintain fire detection devices/systems that activate automatically and notify organizational personnel and emergency responders in the event of a fire. | |
| Fire Suppression Devices | Facility security mechanisms exist to utilize fire suppression devices/systems that provide automatic notification of any activation to organizational personnel and emergency responders. | |
| Temperature & Humidity Controls | Facility security mechanisms exist to maintain and monitor temperature and humidity levels within the facility. | |
| Monitoring with Alarms / Notifications | Facility security mechanisms exist to trigger an alarm or notification of temperature and humidity changes that be potentially harmful to personnel or equipment. | |
| Delivery & Removal | Physical security mechanisms exist to isolate information processing facilities from points such as delivery and loading areas and other points to avoid unauthorized access. | |
| Alternate Work Site | Physical security mechanisms exist to utilize appropriate management, operational and technical controls at alternate work sites. | |
| Equipment Siting & Protection | Physical security mechanisms exist to locate system components within the facility to minimize potential damage from physical and environmental hazards and to minimize the opportunity for unauthorized access. | |
| Transmission Medium Security | Physical security mechanisms exist to protect power and telecommunications cabling carrying data or supporting information services from interception, interference or damage. | |
| Access Control for Output Devices | Physical security mechanisms exist to restrict access to printers and other system output devices to prevent unauthorized individuals from obtaining the output. | |
| Information Leakage Due To Electromagnetic Signals Emanations | Facility security mechanisms exist to protect the system from information leakage due to electromagnetic signals emanations. | |
| Electromagnetic Pulse (EMP) Protection | Physical security mechanisms exist to employ safeguards against Electromagnetic Pulse (EMP) damage for systems and system components. |