---

id: "PE-02(01)" title: "Access by Position or Role" family: "PE" family_name: "Physical and Environmental Protection" sort_id: "pe-02.01" priority: "P2" implementation_level: "organization" parent: "PE-02" enhancement: True

---

Statement

Authorize physical access to the facility where the system resides based on position or role.

Guidance

Role-based facility access includes access by authorized permanent and regular/routine maintenance personnel, duty officers, and emergency medical staff.

Assessment Objective

physical access to the facility where the system resides is authorized based on position or role.

Physical and environmental protection policy

procedures addressing physical access authorizations

physical access control logs or records

list of positions/roles and corresponding physical access authorizations

system entry and exit points

system security plan

other relevant documents or records

Organizational personnel with physical access authorization responsibilities

organizational personnel with physical access to system facility

organizational personnel with information security responsibilities

Organizational processes for physical access authorizations

mechanisms supporting and/or implementing physical access authorizations