PE-20

Requirement

Employ [Assignment: organization-defined asset location technologies] to track and monitor the location and movement of [Assignment: organization-defined assets] within [Assignment: organization-defined controlled areas].

Discussion

Asset location technologies can help ensure that critical assets including vehicles, equipment, and system components remain in authorized locations. Organizations consult with the Office of the General Counsel and senior agency official for privacy regarding the deployment and use of asset location technologies to address potential privacy concerns.

NIST 800-53A Assessment Guidance

Examine

[SELECT FROM: Physical and environmental protection policy; procedures addressing asset monitoring and tracking; documentation showing the use of asset location technologies; system configuration documentation; list of organizational assets requiring tracking and monitoring; asset monitoring and tracking records; system security plan; privacy plan; other relevant documents or records].

Interview

[SELECT FROM: Organizational personnel with asset monitoring and tracking responsibilities; legal counsel; organizational personnel with information security and privacy responsibilities].

Test

[SELECT FROM: Organizational processes for tracking and monitoring assets; mechanisms supporting and/or implementing the tracking and monitoring of assets].

ID	Assessment Objectives
PE-20	<PE-20_ODP[01] asset location technologies> are employed to track and monitor the location and movement of <PE-20_ODP[02] assets> within <PE-20_ODP[03] controlled areas>.

Our CMMC Overview Course simplifies CMMC. Enroll so you can make informed decisions!