CCI-000983

The organization controls organization-defined types of information system components entering and exiting the facility.

Implementation Guidance

The organization being inspected/assessed: 1. Documents in their physical and environmental protection plan (PE-1) controls for all system components entering and exiting the facility. 2. Implements documented controls for system components entering and exiting the facility. DoD has defined the types of information system components as all system components.

Validation Procedures

The organization conducting the inspection/assessment obtains and examines the physical and environmental protection plan to determine if controls have been documented for all system components entering and exiting the facility and visually inspects the controls (e.g., logs, scans, etc) to ensure implementation. DoD has defined the types of information system components as all system components.

Compelling Evidence

1.) Facility access list

The controls below (if any) were marked by NIST as being related to CCI-000983.