BaselineWatch
Desk

8.4.2 FSL III Campus Facility

NIST PIV and digital identity SP 800-116 Rev. 1 against SP 800-116
All changes in this version
removed 8 PACS Use Cases part of 8.4

Title changed

Before · SP 800-116

FSL III Campus Facility

After · SP 800-116 Rev. 1

FSL III Campus Facility

Control changed

Before · SP 800-116

Figure 8-4 depicts a security posture of a FSL III Campus Facility. It includes one or more Controlled areas as well as Limited areas that are restricted to specific group of individuals. Since a FSL III Campus Facility can be considered a moderate-risk facility, a PACS should provide additional security to the more valuable assets. HIGH confidence in the identity of the cardholder should be achieved for access to the Limited area. Note that the entire facility does not need the highest level of security. Access to the Limited area should be complemented with the authentication already completed at the Controlled area. Implementation of BIO-A or PKI authentication mechanisms would be an appropriate countermeasure for the Limited area. Note that these authentication mechanisms validate “something you are” or “something you know” (another factor in authentication).

Controlled area Limited area

Facility services Admin Buildings HQ Lab Space Visitor Registration

Access A Access Controlled area Limited area

Facility services Admin Buildings HQ Lab Space Visitor Registration

Access A Access A Access Access

Figure 8-4: FSL III Campus Facility

After · SP 800-116 Rev. 1

Figure 8-4 depicts a security posture of a FSL III Campus Facility. It includes one or more Controlled areas as well as Limited areas that are restricted to specific group of individuals. Since a FSL III Campus Facility can be considered a moderate-risk facility, a PACS should provide additional security to the more valuable assets. HIGH confidence in the identity of the cardholder should be achieved for access to the Limited area. Note that the entire facility does not need the highest level of security. Access to the Limited area should be complemented with the authentication already completed at the Controlled area. Implementation of BIO-A or PKI authentication mechanisms would be an appropriate countermeasure for the Limited area. Note that these authentication mechanisms validate “something you are” or “something you know” (another factor in authentication).

Controlled area Limited area

Facility services Admin Buildings HQ Lab Space Visitor Registration

Access A Access Controlled area Limited area

Facility services Admin Buildings HQ Lab Space Visitor Registration

Access A Access A Access Access

Figure 8-4: FSL III Campus Facility