CyberStrikeus/CyberStrike - Page 130

pe-23-facility-location

Plan the location or site of the facility where the system resides considering physical and environmental hazards;

pe-3-1-system-access

Enforce physical access authorizations to the system in addition to the physical access controls for the facility at [organization-defined].

pe-3-2-facility-and-systems

Perform security checks [organization-defined] at the physical perimeter of the facility or system for exfiltration of information or removal of syste

pe-3-3-continuous-guards

Employ guards to control [organization-defined] to the facility where the system resides 24 hours per day, 7 days per week.

pe-3-4-lockable-casings

Use lockable physical casings to protect [organization-defined] from unauthorized physical access.

pe-3-5-tamper-protection

Employ [organization-defined] to [organization-defined] physical tampering or alteration of [organization-defined] within the system.

pe-3-6-facility-penetration-testing

Facility Penetration Testing

pe-3-7-physical-barriers

Limit access using physical barriers.

pe-3-8-access-control-vestibules

Employ access control vestibules at [organization-defined].

pe-3-physical-access-control

Enforce physical access authorizations at [organization-defined] by: Verifying individual access authorizations before granting access to the facility

pe-4-access-control-for-transmission

Control physical access to [organization-defined] within organizational facilities using [organization-defined].

pe-5-1-access-to-output-by-authorized-individuals

Access to Output by Authorized Individuals

pe-5-2-link-to-individual-identity

Link individual identity to receipt of output from output devices.

pe-5-3-marking-output-devices

Marking Output Devices

pe-5-access-control-for-output-devices

Control physical access to output from [organization-defined] to prevent unauthorized individuals from obtaining the output.

pe-6-1-intrusion-alarms-and-surveillance-equipment

Monitor physical access to the facility where the system resides using physical intrusion alarms and surveillance equipment.

pe-6-2-automated-intrusion-recognition-and-responses

Recognize [organization-defined] and initiate [organization-defined] using [organization-defined].

pe-6-3-video-surveillance

Employ video surveillance of [organization-defined];

pe-6-4-monitoring-physical-access-to-systems

Monitor physical access to the system in addition to the physical access monitoring of the facility at [organization-defined].

pe-6-monitoring-physical-access

Monitor physical access to the facility where the system resides to detect and respond to physical security incidents;

pe-7-visitor-control

Visitor Control

pe-8-1-automated-records-maintenance-and-review

Maintain and review visitor access records using [organization-defined].

pe-8-2-physical-access-records

Physical Access Records

pe-8-3-limit-personally-identifiable-information-elements

Limit personally identifiable information contained in visitor access records to the following elements identified in the privacy risk assessment: [or

pe-8-visitor-access-records

Maintain visitor access records to the facility where the system resides for [organization-defined];

pe-9-1-redundant-cabling

Employ redundant power cabling paths that are physically separated by [organization-defined].

pe-9-2-automatic-voltage-controls

Employ automatic voltage controls for [organization-defined].

pe-9-power-equipment-and-cabling

Protect power equipment and power cabling for the system from damage and destruction.

pl-1-policy-and-procedures

Develop, document, and disseminate to [organization-defined]: [organization-defined] planning policy that: Procedures to facilitate the implementation

pl-10-baseline-selection

Select a control baseline for the system.

pl-11-baseline-tailoring

Tailor the selected control baseline by applying specified tailoring actions.

pl-2-1-concept-of-operations

Concept of Operations

pl-2-2-functional-architecture

Functional Architecture

pl-2-3-plan-and-coordinate-with-other-organizational-entities

Plan and Coordinate with Other Organizational Entities

pl-2-system-security-and-privacy-plans

Develop security and privacy plans for the system that: Are consistent with the organization’s enterprise architecture; Explicitly define the constitu

pl-3-system-security-plan-update

System Security Plan Update

pl-4-rules-of-behavior

Establish and provide to individuals requiring access to the system, the rules that describe their responsibilities and expected behavior for infor...

pl-5-privacy-impact-assessment

Privacy Impact Assessment

pl-6-security-related-activity-planning

Security-related Activity Planning

pl-7-concept-of-operations

Develop a Concept of Operations (CONOPS) for the system describing how the organization intends to operate the system from the perspective of infor...