Navigate

PE-6 (4)

PE-6 (4): Monitoring Physical Access To Information Systems

The organization monitors physical access to the information system in addition to the physical access monitoring of the facility as [Assignment: organization-defined physical spaces containing one or more components of the information system].

Supplemental

This control enhancement provides additional monitoring for those areas within facilities where there is a concentration of information system components (e.g., server rooms, media storage areas, communications centers).

CIA Levels
Confidentiality	high
Integrity	high
Availability	high

Overlays
Int-A, Int-B, Int-C

Related Controls

The controls below (if any) were marked by NIST as being related to PE-6 (4).

Control	Description
PS-2	The organization: PS-2a.: Assigns a risk designation to all organizational positions; PS-2b.: Establishes screening criteria for individuals filling those positions; and PS-2c.: Reviews and updates position risk designations [Assignment: organization-defined frequency].
PS-3	The organization: PS-3a.: Screens individuals prior to authorizing access to the information system; and PS-3b.: Rescreens individuals according to [Assignment: organization-defined conditions requiring rescreening and, where rescreening is so indicated, the frequency of such rescreening].

Enhancements

The controls below (if any) add on to the requirements of PE-6 (4).

Control	Description
No controls

Related CCIs

The CCIs below are tied to PE-6 (4).

CCI	Definition
CCI-002950	The organization monitors physical access to the information system in addition to the physical access monitoring of the facility as organization-defined physical spaces containing one or more components of the information system.
CCI-002951	The organization defines physical spaces containing one or more components of the information system in which physical access is monitored.