Skip to main content

πŸ’Ό PE-3 PHYSICAL ACCESS CONTROL

Description​

The organization: PE-3a. Enforces physical access authorizations at [Assignment: organization-defined entry/exit points to the facility where the information system resides] by; PE-3a.1. Verifying individual access authorizations before granting access to the facility; and PE-3a.2. Controlling ingress/egress to the facility using [Selection (one or more): [Assignment: organization-defined physical access control systems/devices]; guards]; PE-3b. Maintains physical access audit logs for [Assignment: organization-defined entry/exit points]; PE-3c. Provides [Assignment: organization-defined security safeguards] to control access to areas within the facility officially designated as publicly accessible; PE-3d. Escorts visitors and monitors visitor activity [Assignment: organization-defined circumstances requiring visitor escorts and monitoring]; PE-3e. Secures keys, combinations, and other physical access devices; PE-3f. Inventories [Assignment: organization-defined physical access devices] every [Assignment: organization-defined frequency]; and PE-3g. Changes combinations and keys [Assignment: organization-defined frequency] and/or when keys are lost, combinations are compromised, or individuals are transferred or terminated.

Similar​

  • Internal
    • ID: dec-c-5dcea422

Similar Sections (Give Policies To)​

SectionSub SectionsInternal RulesPoliciesFlags
πŸ’Ό NIST CSF v1.1 β†’ πŸ’Ό DE.CM-2: The physical environment is monitored to detect potential cybersecurity events
πŸ’Ό NIST CSF v1.1 β†’ πŸ’Ό DE.CM-7: Monitoring for unauthorized personnel, connections, devices, and software is performed1923
πŸ’Ό NIST CSF v1.1 β†’ πŸ’Ό DE.DP-3: Detection processes are tested1414
πŸ’Ό NIST CSF v1.1 β†’ πŸ’Ό PR.AC-2: Physical access to assets is managed and protected

Sub Sections​

SectionSub SectionsInternal RulesPoliciesFlags
πŸ’Ό PE-3 (1) INFORMATION SYSTEM ACCESS
πŸ’Ό PE-3 (2) FACILITY _ INFORMATION SYSTEM BOUNDARIES
πŸ’Ό PE-3 (3) CONTINUOUS GUARDS _ ALARMS _ MONITORING
πŸ’Ό PE-3 (4) LOCKABLE CASINGS
πŸ’Ό PE-3 (5) TAMPER PROTECTION
πŸ’Ό PE-3 (6) FACILITY PENETRATION TESTING