Organizational Security Policy

Policy is the First Step in Implementing Cybersecurity

Physical Security

POL.PE.L1-3.10.1

Physical access to organizational systems, equipment, and the respective operating environments shall be limited to authorized individuals who are assigned using need-to-know and most restrictive methodologies.

POL.PE.L1-3.10.3

All visitors shall be authenticated (US person, who visiting, etc.), properly identified (badged), and always escorted and their activities monitored while beyond the check-in area.

POL.PE.L1-3.10.4

Physical access logs shall be maintained and kept for 3 years. Access to these logs shall be consistent with need-to-know and most-restrictive methodologies. Physical access logs (Scanned or camera phone snapshot with sufficient detail as to be ledgeable) shall be remitted to Planet Security, Inc. by 10am the following workday via Signal Messenger.

POL.PE.L1-3.10.5

Physical access devices (keys, keycards, etc.) shall be controlled and managed based on need-to-know and most restrictive methodologies.

• Number of keys shall be known and documented

• Possession of a key shall be known and documented

  • Person assigned

  • Key number assigned

  • Remaining keys in key lockbox

• Initial key log (Scanned or camera phone snapshot with sufficient detail as to be ledgeable) shall be remitted to Planet Security, Inc. within 30 days of contract signature.

• Updated key logs (Scanned or camera phone snapshot with sufficient detail as to be ledgeable) shall be remitted to Planet Security, Inc. by 10am the following workday after the update via Signal Messenger.

POL.PE.L2-3.10.2

CLIENT approved and assigned personnel shall protect and monitor the physical facility and support infrastructure for the CPE/SPE. Planet Security, Inc. does not currently offer physical security monitoring but if you have questions, we'll help on a "best-effort" basis via Signal Messenger.

POL.PE.L2-3.10.6

Alternative work sites such as telework centers or home-based offices shall maintain the same safeguards as the physical premises. Approved workspaces shall be arranged as to ensure confidentiality of CUI. When leaving the area at any time, CUI shall be logically or physically protected to ensure confidentiality is preserved. Because of privacy concerns, Planet Security, Inc. does not offer (nor do we intend to pursue) alternative worksite security services but if you have questions, we'll help on a "best effort" basis via Signal Messenger.


For questions regarding this Information Security Policy, please reach out to your Planet Security, Inc. Support Engineers using Signal.