PE-3(4)

Requirement

Use lockable physical casings to protect [Assignment: organization-defined system components] from unauthorized physical access.

Discussion

The greatest risk from the use of portable devices such as smart phones, tablets, and notebook computers is theft. Organizations can employ lockable, physical casings to reduce or eliminate the risk of equipment theft. Such casings come in a variety of sizes, from units that protect a single notebook computer to full cabinets that can protect multiple servers, computers, and peripherals. Lockable physical casings can be used in conjunction with cable locks or lockdown plates to prevent the theft of the locked casing containing the computer equipment.

NIST 800-53A Assessment Guidance

Examine

[SELECT FROM: Physical and environmental protection policy; procedures addressing physical access control; list of system components requiring protection through lockable physical casings; lockable physical casings; system security plan; other relevant documents or records].

Interview

[SELECT FROM: Organizational personnel with physical access control responsibilities; organizational personnel with information security responsibilities].

ID	Assessment Objectives
PE-03(04)	lockable physical casings are used to protect <PE-03(04)_ODP system components> from unauthorized access.

Our CMMC Overview Course simplifies CMMC. Enroll so you can make informed decisions!