PE-2(1)

Requirement

Authorize physical access to the facility where the system resides based on position or role.

Discussion

Role-based facility access includes access by authorized permanent and regular/routine maintenance personnel, duty officers, and emergency medical staff.

NIST 800-53A Assessment Guidance

Examine

[SELECT FROM: Physical and environmental protection policy; procedures addressing physical access authorizations; physical access control logs or records; list of positions/roles and corresponding physical access authorizations; system entry and exit points; system security plan; other relevant documents or records].

Interview

[SELECT FROM: Organizational personnel with physical access authorization responsibilities; organizational personnel with physical access to system facility; organizational personnel with information security responsibilities].

Test

[SELECT FROM: Organizational processes for physical access authorizations; mechanisms supporting and/or implementing physical access authorizations].

ID	Assessment Objectives
PE-02(01)	physical access to the facility where the system resides is authorized based on position or role.

Our CMMC Overview Course simplifies CMMC. Enroll so you can make informed decisions!