---

id: "PE-03(01)" title: "System Access" family: "PE" family_name: "Physical and Environmental Protection" sort_id: "pe-03.01" priority: "P2" implementation_level: "organization" parent: "PE-03" enhancement: True

---

Statement

Enforce physical access authorizations to the system in addition to the physical access controls for the facility at {{ insert: param, pe-03.01_odp }}.

Guidance

Control of physical access to the system provides additional physical security for those areas within facilities where there is a concentration of system components.

Assessment Objective: physical access authorizations to the system are enforced;

Assessment Objective: physical access controls are enforced for the facility at {{ insert: param, pe-03.01_odp }}.

Physical and environmental protection policy

procedures addressing physical access control

physical access control logs or records

physical access control devices

access authorizations

access credentials

system entry and exit points

list of areas within the facility containing concentrations of system components or system components requiring additional physical protection

system security plan

other relevant documents or records

Organizational personnel with physical access authorization responsibilities

organizational personnel with information security responsibilities

Organizational processes for physical access control to the information system/components

mechanisms supporting and/or implementing physical access control for facility areas containing system components