CMMC 2.13
CMMC · Rev 2.132FAMILY PE
PE.L2-3.10.2
Monitor Facility
Requirement
Protect and monitor the physical facility and support infrastructure for organizational systems.
Further discussion
The infrastructure inside of a facility, such as power and network cables, is protected so that visitors and unauthorized employees cannot access it. The protection is also monitored by security guards, video cameras, sensors, or alarms.
Example
You are responsible for protecting your IT facilities. You install video cameras at each entrance and exit, connect them to a video recorder, and show the camera feeds on a display at the reception desk [c,d]. You also make sure there are secure locks on all entrances, exits, and windows to the facilities [a,b].
Potential Assessment Considerations
• Is physical access monitored to detect and respond to physical security incidents [c, d]?
Supporting controls
NIST 800-171 · Rev 21 mapped
Create a free account or log in to view the cross-referenced controls.
Implementation strategies
10 recommended strategies for this practice.
Create a free account or log in to view the implementation strategies.
Source: DoD CIO · https://dodcio.defense.gov/CMMC/