Anthropic-Cybersecurity-Skills/skills/performing-physical-intrusion-assessment/references/standards.md

# Standards and References: Physical Intrusion Assessment

## MITRE ATT&CK Techniques
- **T1200** - Hardware Additions (rogue device deployment)
- **T1091** - Replication Through Removable Media (USB attacks)
- **T1199** - Trusted Relationship (tailgating, impersonation)
- **T1078** - Valid Accounts (cloned badges)
- **T1598** - Phishing for Information (in-person social engineering)

## NIST References
- **NIST SP 800-53 Rev. 5** - PE-1 through PE-20: Physical and Environmental Protection
- **NIST SP 800-53 Rev. 5** - PE-3: Physical Access Control
- **NIST SP 800-53 Rev. 5** - PE-6: Monitoring Physical Access
- **NIST SP 800-116 Rev. 1** - PIV Card credential management
- **NIST SP 800-46** - Remote access security

## Industry Standards
- **ASIS Physical Security Professional (PSP)** guidelines
- **ISO 27001:2022** - A.7: Physical controls
- **PCI DSS 4.0** - Requirement 9: Restrict physical access to cardholder data
- **ISACA Physical Penetration Testing** white paper (2023)
- **CPTED** - Crime Prevention Through Environmental Design

## Compliance Mapping
| Framework | Control | Description |
|---|---|---|
| PCI DSS 4.0 | 9.1-9.5 | Physical access controls |
| SOC 2 | CC6.4 | Physical access restrictions |
| ISO 27001 | A.7.1-7.4 | Physical security perimeters, controls |
| HIPAA | 164.310 | Physical safeguards |
| NIST CSF | PR.AC-2 | Physical access to assets |