8.4.3 FSL IV or V Campus Facility
All changes in this version
Title changed
Before · SP 800-116
FSL IV or V Campus Facility
After · SP 800-116 Rev. 1
FSL IV or V Campus Facility
Control changed
Before · SP 800-116
Figure 8-5 depicts a security posture of a FSL IV or V Campus Facility. It includes one or more Controlled areas, Limited areas, and Exclusion areas that are restricted to specific groups of individuals.
Controlled area Limited area Exclusion area
Facility services Admin Buildings HQ Lab Space Trade Secret Visitor Registration
Access A Access Access C Controlled area Limited area Exclusion area
Facility services Admin Buildings HQ Lab Space Trade Secret Visitor Registration
Access A Access A Access Access Access C Access C
Figure 8-5: FSL IV or V Campus Facility Although there is not a simple one-to-one mapping between FSLs and PACS Identity Authentication Assurance Levels at access control points, generally higher-risk areas will need stronger identity assurance. Since a FSL IV or V facility is considered a high-risk area, a PACS should achieve VERY HIGH confidence in the identity of the cardholder for access to the Exclusion areas. Note that the entire facility does not need the highest level of confidence in the identity of the cardholder. For access to the Exclusion areas, three-factor authentication should be achieved. This can be accomplished in multiple ways, as shown in Figure 7-2.
After · SP 800-116 Rev. 1
Figure 8-5 depicts a security posture of a FSL IV or V Campus Facility. It includes one or more Controlled areas, Limited areas, and Exclusion areas that are restricted to specific groups of individuals.
Controlled area Limited area Exclusion area
Facility services Admin Buildings HQ Lab Space Trade Secret Visitor Registration
Access A Access Access C Controlled area Limited area Exclusion area
Facility services Admin Buildings HQ Lab Space Trade Secret Visitor Registration
Access A Access A Access Access Access C Access C
Figure 8-5: FSL IV or V Campus Facility Although there is not a simple one-to-one mapping between FSLs and PACS Identity Authentication Assurance Levels at access control points, generally higher-risk areas will need stronger identity assurance. Since a FSL IV or V facility is considered a high-risk area, a PACS should achieve VERY HIGH confidence in the identity of the cardholder for access to the Exclusion areas. Note that the entire facility does not need the highest level of confidence in the identity of the cardholder. For access to the Exclusion areas, three-factor authentication should be achieved. This can be accomplished in multiple ways, as shown in Figure 7-2.