home || catalog: SP800-53rev3 / class: Operational / family: (PE) Physical and Environmental Protection ||
search controls:
search nistpubs:

AC
AT
AU
CA
CM
CP
IA
IR
MA
MP
PE

PE-01
PE-02
PE-03
PE-04
PE-05
PE-06
PE-07
PE-08
PE-09
PE-10
PE-11
PE-12
PE-13
PE-14
PE-15
PE-16
PE-17
PE-18
PE-19
PE-20 *

PL
PM
PS
RA
SA
SC
SI
MMMMM

  PE-20: Physical Security  

base control objective:
The organization ensures that information and equipment are deployed or stored in approved facilities or containers with documented accountability procedures.

supplemental objective information:
None.

enhancements to the base objective:

(1) The organization implements procedures that ensure the proper handling and storage of information.
Enhancement Supplemental Guidance: Procedures to ensure proper handling and storage of information include, for example, scheduled and unscheduled security checks within the workplace or the implementation of a two-person rule within the computing facility.

(2) The organization assesses [Assignment: organization-defined frequency] the physical security of [Assignment: organization-defined list of key computing facilities].

mapping to FIPS199 baseline:

  LOW: base     MOD: base     HIGH: base  

related (regimented) controls:

None.

documents referenced in SP800-53rev3 for PE-20:

None.

Document Date Status Title

Search SP800-53rev3 catalog: