8.1 Single-Tenant Facility
All changes in this version
Title changed
Before · SP 800-116
Single-Tenant Facility
After · SP 800-116 Rev. 1
Single-Tenant Facility
Control changed
Before · SP 800-116
In single-tenant facilities, a single tenant defines its own security requirements and controls its own security measures. Implementation of security measures is uniform. The facility may be an owned or a leased space. If the space is leased, the tenant usually can impose security requirements based on its needs. This type of facility may range from FSL I to FSL V. Therefore, it may have LOW, MODERATE, or HIGH value assets to protect. Facilities evaluated at FSL I or II may not implement PACS and may continue without PACS. Facilities evaluated at FSL III or above should implement PACS. These facilities may have general access areas where individual identification and authentication is not possible, or necessary. In this case, the agency should establish at least one perimeter beyond which individual authentication is required and conducted with PACS. Figure 8-1 is an example of a Single-Tenant facility. The figure shows a building with multiple floors occupied by one tenant. The one security perimeter is the Lobby where the cardholder authentication takes place. This one-perimeter facility should be designated as a Controlled, Limited, or Exclusion area and the appropriate authentication mechanisms should be selected from Figure 7-1.
LOBBY Tenant 1
LOBBY Tenant 1
Figure 8-1: Single-Tenant Facility
After · SP 800-116 Rev. 1
In single-tenant facilities, a single tenant defines its own security requirements and controls its own security measures. Implementation of security measures is uniform. The facility may be an owned or a leased space. If the space is leased, the tenant usually can impose security requirements based on its needs. This type of facility may range from FSL I to FSL V. Therefore, it may have LOW, MODERATE, or HIGH value assets to protect. Facilities evaluated at FSL I or II may not implement PACS and may continue without PACS. Facilities evaluated at FSL III or above should implement PACS. These facilities may have general access areas where individual identification and authentication is not possible, or necessary. In this case, the agency should establish at least one perimeter beyond which individual authentication is required and conducted with PACS. Figure 8-1 is an example of a Single-Tenant facility. The figure shows a building with multiple floors occupied by one tenant. The one security perimeter is the Lobby where the cardholder authentication takes place. This one-perimeter facility should be designated as a Controlled, Limited, or Exclusion area and the appropriate authentication mechanisms should be selected from Figure 7-1.
LOBBY Tenant 1
LOBBY Tenant 1
Figure 8-1: Single-Tenant Facility