Anthropic-Cybersecurity-Skills/skills/performing-physical-intrusion-assessment/references/standards.md

Standards and References: Physical Intrusion Assessment

MITRE ATT&CK Techniques

• T1200 - Hardware Additions (rogue device deployment)
• T1091 - Replication Through Removable Media (USB attacks)
• T1199 - Trusted Relationship (tailgating, impersonation)
• T1078 - Valid Accounts (cloned badges)
• T1598 - Phishing for Information (in-person social engineering)

NIST References

• NIST SP 800-53 Rev. 5 - PE-1 through PE-20: Physical and Environmental Protection
• NIST SP 800-53 Rev. 5 - PE-3: Physical Access Control
• NIST SP 800-53 Rev. 5 - PE-6: Monitoring Physical Access
• NIST SP 800-116 Rev. 1 - PIV Card credential management
• NIST SP 800-46 - Remote access security

Industry Standards

• ASIS Physical Security Professional (PSP) guidelines
• ISO 27001:2022 - A.7: Physical controls
• PCI DSS 4.0 - Requirement 9: Restrict physical access to cardholder data
• ISACA Physical Penetration Testing white paper (2023)
• CPTED - Crime Prevention Through Environmental Design

Compliance Mapping

Framework	Control	Description
PCI DSS 4.0	9.1-9.5	Physical access controls
SOC 2	CC6.4	Physical access restrictions
ISO 27001	A.7.1-7.4	Physical security perimeters, controls
HIPAA	164.310	Physical safeguards
NIST CSF	PR.AC-2	Physical access to assets