PE-3(5)

Requirement

Employ [Assignment: organization-defined anti-tamper technologies] to [Selection (one or more): detect; prevent] physical tampering or alteration of [Assignment: organization-defined hardware components] within the system.

Discussion

Organizations can implement tamper detection and prevention at selected hardware components or implement tamper detection at some components and tamper prevention at other components. Detection and prevention activities can employ many types of anti-tamper technologies, including tamper-detection seals and anti-tamper coatings. Anti-tamper programs help to detect hardware alterations through counterfeiting and other supply chain-related risks.

NIST 800-53A Assessment Guidance

Examine

[SELECT FROM: Physical and environmental protection policy; procedures addressing physical access control; list of security safeguards to detect/prevent physical tampering or alteration of system hardware components; system security plan; other relevant documents or records].

Interview

[SELECT FROM: Organizational personnel with physical access control responsibilities; organizational personnel with information security responsibilities].

Test

[SELECT FROM: Organizational processes to detect/prevent physical tampering or alteration of system hardware components; mechanisms/security safeguards supporting and/or implementing the detection/prevention of physical tampering/alternation of system hardware components].

ID	Assessment Objectives
PE-03(05)	<PE-03(05)_ODP[01] anti-tamper technologies> are employed to <PE-03(05)_ODP[02] SELECTED PARAMETER VALUES> physical tampering or alteration of <PE-03(05)_ODP[03] hardware components> within the system.

Our CMMC Overview Course simplifies CMMC. Enroll so you can make informed decisions!