Navigate

PE-4

PE-4: Access Control for Transmission Medium

The organization controls physical access to [one of ] within organizational facilities using [one of ].

Supplemental

Physical security safeguards applied to information system distribution and transmission lines help to prevent accidental damage, disruption, and physical tampering. In addition, physical safeguards may be necessary to help prevent eavesdropping or in transit modification of unencrypted transmissions. Security safeguards to control physical access to system distribution and transmission lines include, for example: (i) locked wiring closets; (ii) disconnected or locked spare jacks; and/or (iii) protection of cabling by conduit or cable trays.

CIA Levels
Confidentiality	moderate
Integrity	moderate
Availability	unknown

Overlays
Classified, Int-A, Int-B, Int-C, Privacy (PHI)

CSF Categories
PR.AC-2

Related Controls

The controls below (if any) were marked by NIST as being related to PE-4.

Control	Description
MP-2	The organization restricts access to [one of ] to [one of ].
MP-4	The organization: a: Physically controls and securely stores [one of ] within [one of ]; and b: Protects information system media until the media are destroyed or sanitized using approved equipment, techniques, and procedures.
PE-2	The organization: a: Develops, approves, and maintains a list of individuals with authorized access to the facility where the information system resides; b: Issues authorization credentials for facility access; c: Reviews the access list detailing authorized facility access by individuals [one of ]; and d: Removes individuals from the facility access list when access is no longer required.
PE-3	The organization: a: Enforces physical access authorizations at [one of ] by; 1: Verifying individual access authorizations before granting access to the facility; and 2: Controlling ingress/egress to the facility using [one or more of " {{ insert: param, pe-3_prm_3 }} "/"guards"]; b: Maintains physical access audit logs for [one of ]; c: Provides [one of ] to control access to areas within the facility officially designated as publicly accessible; d: Escorts visitors and monitors visitor activity [one of ]; e: Secures keys, combinations, and other physical access devices; f: Inventories [one of ] every [one of ]; and g: Changes combinations and keys [one of ] and/or when keys are lost, combinations are compromised, or individuals are transferred or terminated.
PE-5	The organization controls physical access to information system output devices to prevent unauthorized individuals from obtaining the output.
SC-7	The information system: a: Monitors and controls communications at the external boundary of the system and at key internal boundaries within the system; b: Implements subnetworks for publicly accessible system components that are [one of "physically"/"logically"] separated from internal organizational networks; and c: Connects to external networks or information systems only through managed interfaces consisting of boundary protection devices arranged in accordance with an organizational security architecture.
SC-8	The information system protects the [one or more of "confidentiality"/"integrity"] of transmitted information.

Enhancements

The controls below (if any) add on to the requirements of PE-4.

Control	Description
No controls

Related CCIs

The CCIs below are tied to PE-4.

CCI	Definition
CCI-000936	Control physical access to organization-defined system distribution and transmission lines within organizational facilities using organization-defined security controls.
CCI-002930	Defines system distribution and transmission lines within organizational facilities to control physical access to using organization-defined security controls.
CCI-002931	Defines security controls to control physical access to organization-defined system distribution and transmission lines within organizational facilities.