Navigate

PE-2 (3)

PE-2 (3): Restrict Unescorted Access

The organization restricts unescorted access to the facility where the information system resides to personnel with [Selection (one or more): security clearances for all information contained within the system; formal access authorizations for all information contained within the system; need for access to all information contained within the system; [Assignment: organization-defined credentials]].

Supplemental

Due to the highly sensitive nature of classified information stored within certain facilities, it is important that individuals lacking sufficient security clearances, access approvals, or need to know, be escorted by individuals with appropriate credentials to ensure that such information is not exposed or otherwise compromised.

CIA Levels
Confidentiality	unknown
Integrity	unknown
Availability	unknown

Overlays
Classified, Int-A, Int-B, Int-C, NC3

Related Controls

The controls below (if any) were marked by NIST as being related to PE-2 (3).

Control	Description
PS-2	The organization: PS-2a.: Assigns a risk designation to all organizational positions; PS-2b.: Establishes screening criteria for individuals filling those positions; and PS-2c.: Reviews and updates position risk designations [Assignment: organization-defined frequency].
PS-6	The organization: PS-6a.: Develops and documents access agreements for organizational information systems; PS-6b.: Reviews and updates the access agreements [Assignment: organization-defined frequency]; and PS-6c.: Ensures that individuals requiring access to organizational information and information systems: PS-6c.1.: Sign appropriate access agreements prior to being granted access; and PS-6c.2.: Re-sign access agreements to maintain access to organizational information systems when access agreements have been updated or [Assignment: organization-defined frequency].

Control

Description

PS-2

The organization:

PS-2a.: Assigns a risk designation to all organizational positions;

PS-2b.: Establishes screening criteria for individuals filling those positions; and

PS-2c.: Reviews and updates position risk designations [Assignment: organization-defined frequency].

PS-6

The organization:

PS-6a.: Develops and documents access agreements for organizational information systems;

PS-6b.: Reviews and updates the access agreements [Assignment: organization-defined frequency]; and

PS-6c.: Ensures that individuals requiring access to organizational information and information systems:
- PS-6c.1.: Sign appropriate access agreements prior to being granted access; and
- PS-6c.2.: Re-sign access agreements to maintain access to organizational information systems when access agreements have been updated or [Assignment: organization-defined frequency].

Enhancements

The controls below (if any) add on to the requirements of PE-2 (3).

Control	Description
No controls

Related CCIs

The CCIs below are tied to PE-2 (3).

CCI	Definition
CCI-002913	The organization restricts unescorted access to the facility where the information system resides to personnel with one or more of the following: security clearances for all information contained within the system; formal access authorizations for all information contained within the system; need for access to all information contained within the system; organization-defined credentials.
CCI-002914	The organization defines the credentials required for personnel to have unescorted access to the facility where the information system resides.