PE-3(1)

Requirement

Enforce physical access authorizations to the system in addition to the physical access controls for the facility at [Assignment: organization-defined physical spaces containing one or more components of the system].

Discussion

Control of physical access to the system provides additional physical security for those areas within facilities where there is a concentration of system components.

NIST 800-53A Assessment Guidance

Examine

[SELECT FROM: Physical and environmental protection policy; procedures addressing physical access control; physical access control logs or records; physical access control devices; access authorizations; access credentials; system entry and exit points; list of areas within the facility containing concentrations of system components or system components requiring additional physical protection; system security plan; other relevant documents or records].

Interview

[SELECT FROM: Organizational personnel with physical access authorization responsibilities; organizational personnel with information security responsibilities].

Test

[SELECT FROM: Organizational processes for physical access control to the information system/components; mechanisms supporting and/or implementing physical access control for facility areas containing system components].

ID	Assessment Objectives
PE-03(01)[01]	physical access authorizations to the system are enforced;
PE-03(01)[02]	physical access controls are enforced for the facility at <PE-03(01)_ODP physical spaces>.

Our CMMC Overview Course simplifies CMMC. Enroll so you can make informed decisions!