Navigate

PE-3(3)

PE-3(3): Continuous Guards

Employ guards to control [physical access points to the facility where the system resides are defined;] to the facility where the system resides 24 hours per day, 7 days per week.

Supplemental

Employing guards at selected physical access points to the facility provides a more rapid response capability for organizations. Guards also provide the opportunity for human surveillance in areas of the facility not covered by video surveillance.

CIA Levels
Confidentiality	unknown
Integrity	unknown
Availability	unknown

Overlays
CDS - Access, CDS - Multilevel, CDS - Transfer, Classified, Int-A, Int-B, Int-C

CSF Categories
None

Related Controls

The controls below (if any) were marked by NIST as being related to PE-3(3).

Control	Description
CP-6	a: Establish an alternate storage site, including necessary agreements to permit the storage and retrieval of system backup information; and b: Ensure that the alternate storage site provides controls equivalent to that of the primary site.
CP-7	a: Establish an alternate processing site, including necessary agreements to permit the transfer and resumption of [system operations for essential mission and business functions are defined;] for essential mission and business functions within [time period consistent with recovery time and recovery point objectives is defined;] when the primary processing capabilities are unavailable; b: Make available at the alternate processing site, the equipment and supplies required to transfer and resume operations or put contracts in place to support delivery to the site within the organization-defined time period for transfer and resumption; and c: Provide controls at the alternate processing site that are equivalent to those at the primary site.
PE-6	a: Monitor physical access to the facility where the system resides to detect and respond to physical security incidents; b: Review physical access logs [the frequency at which to review physical access logs is defined;] and upon occurrence of [events or potential indication of events requiring physical access logs to be reviewed are defined;] ; and c: Coordinate results of reviews and investigations with the organizational incident response capability.

Enhancements

The controls below (if any) add on to the requirements of PE-3(3).

Control	Description
No controls

Related CCIs

The CCIs below are tied to PE-3(3).

CCI	Definition
CCI-000930	Employ guards to control every physical access point to the facility where the system resides 24 hours per day, 7 days per week.