---

id: "PE-16" title: "Delivery and Removal" family: "PE" family_name: "Physical and Environmental Protection" sort_id: "pe-16" priority: "P2" implementation_level: "organization"

---

Authorize and control {{ insert: param, pe-16_prm_1 }} entering and exiting the facility; and

Maintain records of the system components.

Guidance

Enforcing authorizations for entry and exit of system components may require restricting access to delivery areas and isolating the areas from the system and media libraries.

Assessment Objective: {{ insert: param, pe-16_odp.01 }} are authorized when entering the facility;

Assessment Objective: {{ insert: param, pe-16_odp.01 }} are controlled when entering the facility;

Assessment Objective: {{ insert: param, pe-16_odp.02 }} are authorized when exiting the facility;

Assessment Objective: {{ insert: param, pe-16_odp.02 }} are controlled when exiting the facility;

Assessment Objective: records of the system components are maintained.

Physical and environmental protection policy

procedures addressing the delivery and removal of system components from the facility

facility housing the system

records of items entering and exiting the facility

system security plan

other relevant documents or records

Organizational personnel with responsibilities for controlling system components entering and exiting the facility

organizational personnel with information security responsibilities

Organizational process for authorizing, monitoring, and controlling system-related items entering and exiting the facility

mechanisms supporting and/or implementing, authorizing, monitoring, and controlling system-related items entering and exiting the facility