Navigate

PE-2(3)

PE-2(3): Restrict Unescorted Access

Restrict unescorted access to the facility where the system resides to personnel with [one or more of "security clearances for all information contained within the system"/"formal access authorizations for all information contained within the system"/"need for access to all information contained within the system"/"{{ insert: param, pe-02.03_odp.02 }} "].

Supplemental

Individuals without required security clearances, access approvals, or need to know are escorted by individuals with appropriate physical access authorizations to ensure that information is not exposed or otherwise compromised.

CIA Levels
Confidentiality	unknown
Integrity	unknown
Availability	unknown

Overlays
CDS - Access, CDS - Multilevel, CDS - Transfer, Classified, Int-A, Int-B, Int-C

CSF Categories
None

Related Controls

The controls below (if any) were marked by NIST as being related to PE-2(3).

Control	Description
PS-2	a: Assign a risk designation to all organizational positions; b: Establish screening criteria for individuals filling those positions; and c: Review and update position risk designations [the frequency at which to review and update position risk designations is defined;].
PS-6	a: Develop and document access agreements for organizational systems; b: Review and update the access agreements [the frequency at which to review and update access agreements is defined;] ; and c: Verify that individuals requiring access to organizational information and systems: 1: Sign appropriate access agreements prior to being granted access; and 2: Re-sign access agreements to maintain access to organizational systems when access agreements have been updated or [the frequency at which to re-sign access agreements to maintain access to organizational information is defined;].

Control

Description

PS-2

a: Assign a risk designation to all organizational positions;

b: Establish screening criteria for individuals filling those positions; and

c: Review and update position risk designations [the frequency at which to review and update position risk designations is defined;].

PS-6

a: Develop and document access agreements for organizational systems;

b: Review and update the access agreements [the frequency at which to review and update access agreements is defined;] ; and

c: Verify that individuals requiring access to organizational information and systems:
- 1: Sign appropriate access agreements prior to being granted access; and
- 2: Re-sign access agreements to maintain access to organizational systems when access agreements have been updated or [the frequency at which to re-sign access agreements to maintain access to organizational information is defined;].

Enhancements

The controls below (if any) add on to the requirements of PE-2(3).

Control	Description
No controls

Related CCIs

The CCIs below are tied to PE-2(3).

CCI	Definition
CCI-002913	Restrict unescorted access to the facility where the system resides to personnel with one or more of the following: security clearances for all information contained within the system; formal access authorizations for all information contained within the system; need for access to all information contained within the system; organization-defined physical access authorizations.
CCI-002914	Defines the credentials required for personnel to have unescorted access to the facility where the system resides.