Direct links from the subject.
| Property | Value |
|---|---|
|
The subject is an instance of a class. |
|
|
The subject is an instance of a class. |
An idea or notion; a unit of thought. |
|
A human-readable name for the subject. |
PR.AA-06.3: Critical zones shall have additional physical access controls beyond those applied to general facilities. |
|
PR.AA-06.3 |
|
|
http://cyfun.data.gift/data/loc_CyFun2025_Booklet_ESSENTIAL_E_p102 |
|
|
Relates a concept to a concept that is more general in meaning. |
|
|
A general note, for any purpose. |
The goal of this control is to reduce the risk of unauthorised physical access to areas essential for operational continuity, data integrity, and personnel and equipment safety by applying stricter access measures than those used in general facility areas. To achieve this goal, the following actions should be taken: - Critical zones should be identified during asset classification. These typically include: - Production and Operational Technology (OT) environments - Server rooms and data centres - Finance and Human Resources offices - Control rooms - Locations storing sensitive or classified information - The following enhanced physical access controls should be considered: - Dual-factor authentication (e.g. badge + biometrics) - Continuous surveillance (e.g. CCTV, motion sensors) - Access logging with regular review - On-site or patrolling security personnel - Alarm systems with real-time alerts - Visitor management procedures: - Pre-approval and escorting - Time-limited access - Visitor logs - Ensure consistency with broader physical access policies, including: - PR.AA-06.1 – Risk-based access control - PR.AA-06.2 – Emergency access procedures - PR.AA-06.4 – Physical protection of assets - Adapt controls to the criticalityofeach zone and integrate them into the overall physical securitystrategy. |
|
A general note, for any purpose. |
<div><p>The goal of this control is to reduce the risk of unauthorised physical access to areas essential for operational continuity, data integrity, and personnel and equipment safety by applying stricter access measures than those used in general facility areas. To achieve this goal, the following actions should be taken:</p><ul><li>Critical zones should be identified during asset classification. These typically include:<ul><li>Production and Operational Technology (OT) environments</li><li>Server rooms and data centres</li><li>Finance and Human Resources offices</li><li>Control rooms</li><li>Locations storing sensitive or classified information</li></ul></li><li>The following enhanced physical access controls should be considered:<ul><li>Dual-factor authentication (e.g. badge + biometrics)</li><li>Continuous surveillance (e.g. CCTV, motion sensors)</li><li>Access logging with regular review</li><li>On-site or patrolling security personnel</li><li>Alarm systems with real-time alerts</li><li>Visitor management procedures:<ul><li>Pre-approval and escorting</li><li>Time-limited access</li><li>Visitor logs</li></ul></li></ul></li><li>Ensure consistency with broader physical access policies, including:<ul><li>PR.AA-06.1 – Risk-based access control</li><li>PR.AA-06.2 – Emergency access procedures</li><li>PR.AA-06.4 – Physical protection of assets</li></ul></li><li>Adapt controls to the criticalityofeach zone and integrate them into the overall physical securitystrategy.</li></ul></div> |
|
A general note, for any purpose. |
The goal of this control is to reduce the risk of unauthorised physical access to areas essential for operational continuity, data integrity, and personnel and equipment safety by applying stricter access measures than those used in general facility areas. To achieve this goal, the following actions should be taken: • Critical zones should be identified during asset classification. These typically include: o Production and Operational Technology (OT) environments o Server rooms and data centres o Finance and Human Resources offices o Control rooms o Locations storing sensitive or classified information • The following enhanced physical access controls should be considered: o Dual-factor authentication (e.g. badge + biometrics) o Continuous surveillance (e.g. CCTV, motion sensors) o Access logging with regular review o On-site or patrolling security personnel o Alarm systems with real-time alerts o Visitor management procedures: - Pre-approval and escorting - Time-limited access - Visitor logs • Ensure consistency with broader physical access policies, including: o PR.AA-06.1 – Risk-based access control o PR.AA-06.2 – Emergency access procedures o PR.AA-06.4 – Physical protection of assets • Adapt controls to the criticalityofeach zone and integrate them into the overall physical securitystrategy. |
|
A general note, for any purpose. |
The goal of this control is to reduce the risk of unauthorised physical access to areas essential for operational continuity, data integrity, and personnel and equipment safety by applying stricter access measures than those used in general facility areas. To achieve this goal, the following actions should be taken: - Critical zones should be identified during asset classification. These typically include: - Production and Operational Technology (OT) environments - Server rooms and data centres - Finance and Human Resources offices - Control rooms - Locations storing sensitive or classified information - The following enhanced physical access controls should be considered: - Dual-factor authentication (e.g. badge + biometrics) - Continuous surveillance (e.g. CCTV, motion sensors) - Access logging with regular review - On-site or patrolling security personnel - Alarm systems with real-time alerts - Visitor management procedures: - Pre-approval and escorting - Time-limited access - Visitor logs - Ensure consistency with broader physical access policies, including: - PR.AA-06.1 – Risk-based access control - PR.AA-06.2 – Emergency access procedures - PR.AA-06.4 – Physical protection of assets - Adapt controls to the criticalityofeach zone and integrate them into the overall physical securitystrategy. |
|
A notation, also known as classification code, is a string of characters such as "T58.5" or "303.4833" used to uniquely identify a concept within the scope of a given concept scheme. |
PR.AA-06.3 |
|
skos:prefLabel, skos:altLabel and skos:hiddenLabel are pairwise disjoint properties. |
Critical zone additional access controls |
|
A resource has no more than one value of skos:prefLabel per language tag, and no more than one value of skos:prefLabel without language tag. |
Critical zones shall have additional physical access controls beyond those applied to general facilities. |
|
Relates a resource (for example a concept) to a concept scheme in which it is included. |
|
|
Relates a resource (for example a concept) to a concept scheme in which it is included. |
http://cyfun.data.gift/data/CyFun2025_delta_IMPORTANT_to_ESSENTIAL |
|
Relates a resource (for example a concept) to a concept scheme in which it is included. |
|
|
The number of triples associated with the subject. |
17 |
|
Specifies the dataset the subject is part of. |
Resultaten 1 - 19 of 19
Inverse links to the subject.
| Property | Subject |
|---|---|
|
Relates a concept to a concept that is more specific in meaning. |
Resultaten 1 - 1 of 1