Page 165 of the DSE Cybersecurity knowledge center, with source-backed guidance and practical next steps.
Source-backed guidance for identity, vulnerability reduction, ransomware readiness, detection, response, and recovery.
The FBI CJIS Security Policy explicitly says camera or electronic monitoring does not constitute an escort. Design visitor procedures around a qualified person where escort is required.
Read the briefing
CJIS policy links monitoring of physical access with quarterly and incident-driven review. Use logs to identify patterns, not merely to prove that a reader produced events.
Read the playbook
CJIS physical protection extends to transmission paths and output devices. Trace cable, closet, jack, monitor, printer, and other exposure beyond the room entrance.
Read the guide
NIST PE-18 calls for positioning system components to reduce physical and environmental hazards and unauthorized access. Apply that lens to PACS panels, power, and interfaces.
Read the checklist
NIST PE-16 addresses authorization and records for system components entering and leaving a facility. Extend PACS custody to delivery, staging, repair, return, and disposal.
Read the playbook
NIST PE-20 addresses asset monitoring within controlled areas. Apply a proportionate inventory to programmer laptops, encoders, spare panels, and service interfaces.
Read the checklist
ONVIF Profile A covers selected access-control configuration functions. Test creation, update, revocation, scheduling, and events across the exact client and device.
Read the checklist
Direct relay control can override normal Secure Entry behavior. Reserve it for vendor-directed troubleshooting with approvals, alternate safeguards, and verified restoration.
Read the playbook
Microsoft Entra Lifecycle Workflows can automate identity tasks from user attributes, but the attribute source, scope, timing, and failed-task handling must be governed before access changes run unattended.
Read the playbook
Restricted management administrative units can block tenant-scoped administrators from modifying selected Entra objects, and that stronger boundary can also break established support and automation paths.
Read the guide