PE-18

Requirement

Position system components within the facility to minimize potential damage from [Assignment: organization-defined physical and environmental hazards] and to minimize the opportunity for unauthorized access.

Discussion

Physical and environmental hazards include floods, fires, tornadoes, earthquakes, hurricanes, terrorism, vandalism, an electromagnetic pulse, electrical interference, and other forms of incoming electromagnetic radiation. Organizations consider the location of entry points where unauthorized individuals, while not being granted access, might nonetheless be near systems. Such proximity can increase the risk of unauthorized access to organizational communications using wireless packet sniffers or microphones, or unauthorized disclosure of information.

NIST 800-53A Assessment Guidance

Examine

[SELECT FROM: Physical and environmental protection policy; procedures addressing the positioning of system components; documentation providing the location and position of system components within the facility; locations housing system components within the facility; list of physical and environmental hazards with the potential to damage system components within the facility; system security plan; other relevant documents or records].

Interview

[SELECT FROM: Organizational personnel with responsibilities for positioning system components; organizational personnel with information security responsibilities].

Test

[SELECT FROM: Organizational processes for positioning system components].

ID	Assessment Objectives
PE-18	system components are positioned within the facility to minimize potential damage from <PE-18_ODP physical and environmental hazards> and to minimize the opportunity for unauthorized access.

Our CMMC Overview Course simplifies CMMC. Enroll so you can make informed decisions!