Problem: Access control systems are constantly under surveillance and attack. An attacker who gains control of an access control system can leverage that access to gain entry to other systems in the enterprise. Frequent testing of access control systems ensures that weaknesses are found and can be dealt with before they are exploited. Network monitoring is a critical IT process where all networking components, such as routers, switches, firewalls, and servers, are monitored for faults, performance, and anomalies in order to detect possible intruders or attacks.
A high-level plan for testing RBAC and physical security (building access)
Include the type of tests to be performed and the frequency