Navigate

PE-6(4)

PE-6(4): Monitoring Physical Access to Information Systems

The organization monitors physical access to the information system in addition to the physical access monitoring of the facility as [organization-defined physical spaces containing one or more components of the information system].

Supplemental

This control enhancement provides additional monitoring for those areas within facilities where there is a concentration of information system components (e.g., server rooms, media storage areas, communications centers).

CIA Levels
Confidentiality	high
Integrity	high
Availability	high

Overlays
None

CSF Categories
None

Related Controls

The controls below (if any) were marked by NIST as being related to PE-6(4).

Control	Description
PS-2	The organization: a: Assigns a risk designation to all organizational positions; b: Establishes screening criteria for individuals filling those positions; and c: Reviews and updates position risk designations [organization-defined frequency].
PS-3	The organization: a: Screens individuals prior to authorizing access to the information system; and b: Rescreens individuals according to [organization-defined conditions requiring rescreening and, where rescreening is so indicated, the frequency of such rescreening].

Enhancements

The controls below (if any) add on to the requirements of PE-6(4).

Control	Description
No controls

Related CCIs

The CCIs below are tied to PE-6(4).

CCI	Definition
CCI-002950	Monitor physical access to the system in addition to the physical access monitoring of the facility as organization-defined physical spaces containing one or more components of the system.
CCI-002951	Defines physical spaces containing one or more components of the system in which physical access is monitored.