id: "PE-03(02)" title: "Facility and Systems" family: "PE" family_name: "Physical and Environmental Protection" sort_id: "pe-03.02" priority: "P2" implementation_level: "organization" parent: "PE-03" enhancement: True
Statement
Perform security checks {{ insert: param, pe-03.02_odp }} at the physical perimeter of the facility or system for exfiltration of information or removal of system components.
Guidance
Organizations determine the extent, frequency, and/or randomness of security checks to adequately mitigate risk associated with exfiltration.
Assessment Objective
security checks are performed {{ insert: param, pe-03.02_odp }} at the physical perimeter of the facility or system for exfiltration of information or removal of system components.
Physical and environmental protection policy
procedures addressing physical access control
physical access control logs or records
records of security checks
security audit reports
security inspection reports
facility layout documentation
system entry and exit points
system security plan
other relevant documents or records
Organizational personnel with physical access control responsibilities
organizational personnel with information security responsibilities
Organizational processes for physical access control to the facility and/or system
mechanisms supporting and/or implementing physical access control for the facility or system
mechanisms supporting and/or implementing security checks for the unauthorized exfiltration of information