3.10.5 Managing Physical Access Devices

To go back to the NIST 800-171 Controls page, click here.

Guides

• SANS Institute – Security Laboratory: IT Managers – Safety Series – Physical Security
• NIST SP 800-128 – Guide for Security-Focused Configuration Management of Information Systems
• Naval Facilities Engineering Service Center – User’s Guide on Controlling Locks, Keys and Access Cards

Example Tools

• Keywatcher

Additional Lessons Learned

• InfoSec Institute – IT Security Policies Should Include a Physical Security Policy

Sample Policy & Procedures

• State of Michigan – Physical Protection Policy Sample
• Environmental Protection Agency – Information Procedures – Information Security – CIO-2150.3-P-11.1 – Interim Physical and Environmental Protection Procedures

Vendor Documentation

• Maglocks – Door Access Control Systems Buyer’s Guide and How To Manual

Videos

• YouTube – Physical Security Controls