|
control enhancementCA-8(3)
Facility Penetration Testing (CA-8(3))
Employ a penetration testing process that includes [organization-defined] [organization-defined] attempts to bypass or circumvent controls associated with physical access points to the facility.
assessmentauthorizationmonitoringenhancement
Why These Connect
Enhances1
These enhancements add specific capabilities or refinements to the base control.
Organization-Defined Parameters(2)
Assignmentorganization-defined frequency
SelectionSelection (one-or-more): announced / unannounced