NIST 800-53 rev.5/Assessment, Authorization, and Monitoring/225 of 1011
CA-08 (03)Penetration Testing | Facility Penetration Testing
Control family: Assessment, Authorization, and Monitoring
Control description
Employ a penetration testing process that includes [Assignment: organization-defined frequency] [Selection (one or more): announced; unannounced] attempts to bypass or circumvent controls associated with physical access points to the facility.
How to implement
Coming in phase 2Step-by-step guidance for implementing this control on Microsoft Azure, using services such as Azure Policy, Microsoft Defender for Cloud and Entra ID. It will be matched to your environment.