The needs assessment should also examine physical security factors, among them whether: entrances and exits are marked and controlled against unauthorized entry; security staff are on site; visitors sign in and are escorted; lighting is adequate; up-to-date floor plans showing every escape route are posted; there are safe shelter areas if evacuation is impossible; on-site parking exists and is secure; panic buttons or other alarm procedures are in place and tested for effectiveness; cameras cover the property and are monitored or recorded; entrances and car parks can be readily seen; furniture is placed to allow evacuation; doors and windows can be secured; and site-wide communication or mass alert and notification systems exist.
This control maps to 2 controls across 1 other frameworks. If you already hold one of them, the evidence you collected for it is the starting point here rather than new work.
Every mapping shown was judged rather than inferred from wording similarity, and the ones that failed review are published too. See the coverage reports and what was rejected.
The graph holds this control, the 2 it maps to, and the evidence behind each claim, over MCP and REST.