a. Monitor physical access to the facility where the system resides to detect and respond to physical security incidents; b. Review physical access logs [Assignment: organization-defined frequency] and upon occurrence of [Assignment: organization-defined events or potential indications of events]; and c. Coordinate results of reviews and investigations with the organizational incident response capability.
| ID | Name | Description | D3FEND | |
| ID | Description | |
| Requirement |
|---|
| ID | Name | Description | |
|---|---|---|---|