Navigate

PE-3 (3)

PE-3 (3): Continuous Guards / Alarms / Monitoring

The organization employs guards and/or alarms to monitor every physical access point to the facility where the information system resides 24 hours per day, 7 days per week.

Supplemental

None

CIA Levels
Confidentiality	unknown
Integrity	unknown
Availability	unknown

Overlays
Classified, Int-A, Int-B, Int-C

Related Controls

The controls below (if any) were marked by NIST as being related to PE-3 (3).

Control	Description
CP-6	The organization: CP-6a.: Establishes an alternate storage site including necessary agreements to permit the storage and retrieval of information system backup information; and CP-6b.: Ensures that the alternate storage site provides information security safeguards equivalent to that of the primary site.
CP-7	The organization: CP-7a.: Establishes an alternate processing site including necessary agreements to permit the transfer and resumption of [Assignment: organization-defined information system operations] for essential missions/business functions within [Assignment: organization-defined time period consistent with recovery time and recovery point objectives] when the primary processing capabilities are unavailable; CP-7b.: Ensures that equipment and supplies required to transfer and resume operations are available at the alternate processing site or contracts are in place to support delivery to the site within the organization-defined time period for transfer/resumption; and CP-7c.: Ensures that the alternate processing site provides information security safeguards equivalent to those of the primary site.

Control

Description

CP-6

The organization:

CP-6a.: Establishes an alternate storage site including necessary agreements to permit the storage and retrieval of information system backup information; and

CP-6b.: Ensures that the alternate storage site provides information security safeguards equivalent to that of the primary site.

CP-7

The organization:

CP-7a.: Establishes an alternate processing site including necessary agreements to permit the transfer and resumption of [Assignment: organization-defined information system operations] for essential missions/business functions within [Assignment: organization-defined time period consistent with recovery time and recovery point objectives] when the primary processing capabilities are unavailable;

CP-7b.: Ensures that equipment and supplies required to transfer and resume operations are available at the alternate processing site or contracts are in place to support delivery to the site within the organization-defined time period for transfer/resumption; and

CP-7c.: Ensures that the alternate processing site provides information security safeguards equivalent to those of the primary site.

Enhancements

The controls below (if any) add on to the requirements of PE-3 (3).

Control	Description
No controls

Related CCIs

The CCIs below are tied to PE-3 (3).

CCI	Definition
CCI-000930	The organization employs guards and/or alarms to monitor every physical access point to the facility where the information system resides 24 hours per day, 7 days per week.