CCI-002926

The organization defines the physical spaces containing one or more components of the information system that require physical access authorizations and controls at the facility where the information system resides.

Implementation Guidance

The organization being inspected/assessed defines and documents the physical spaces containing one or more components of the information system that require physical access authorizations and controls at the facility. DoD has determined the physical spaces are not appropriate to define at the Enterprise level.

Validation Procedures

The organization conducting the inspection/assessment obtains and examines the documented physical spaces to ensure the organization being inspected/assessed defines the physical spaces containing one or more components of the information system that require physical access authorizations and controls at the facility. DoD has determined the physical spaces are not appropriate to define at the Enterprise level.

Compelling Evidence

1.) Documentation that defines the physical spaces containing one or more components of the information system that require physical access authorizations and controls at the facility

The controls below (if any) were marked by NIST as being related to CCI-002926.