id: "PE-03(05)" title: "Tamper Protection" family: "PE" family_name: "Physical and Environmental Protection" sort_id: "pe-03.05" priority: "P2" implementation_level: "organization" parent: "PE-03" enhancement: True
Statement
Employ {{ insert: param, pe-03.05_odp.01 }} to {{ insert: param, pe-03.05_odp.02 }} physical tampering or alteration of {{ insert: param, pe-03.05_odp.03 }} within the system.
Guidance
Organizations can implement tamper detection and prevention at selected hardware components or implement tamper detection at some components and tamper prevention at other components. Detection and prevention activities can employ many types of anti-tamper technologies, including tamper-detection seals and anti-tamper coatings. Anti-tamper programs help to detect hardware alterations through counterfeiting and other supply chain-related risks.
Assessment Objective
{{ insert: param, pe-03.05_odp.01 }} are employed to {{ insert: param, pe-03.05_odp.02 }} physical tampering or alteration of {{ insert: param, pe-03.05_odp.03 }} within the system.
Physical and environmental protection policy
procedures addressing physical access control
list of security safeguards to detect/prevent physical tampering or alteration of system hardware components
system security plan
other relevant documents or records
Organizational personnel with physical access control responsibilities
organizational personnel with information security responsibilities
Organizational processes to detect/prevent physical tampering or alteration of system hardware components
mechanisms/security safeguards supporting and/or implementing the detection/prevention of physical tampering/alternation of system hardware components