a. Develop, document, and disseminate to {{ insert: param, pe-1_prm_1 }}: 1. {{ insert: param, pe-01_odp.03 }} physical and environmental protection policy that: (a) Addresses purpose, ...

a. Develop, approve, and maintain a list of individuals with authorized access to the facility where the system resides; b. Issue authorization credentials for facility access; c. Review the ...

Authorize physical access to the facility where the system resides based on position or role.

Require two forms of identification from the following forms of identification for visitor access to the facility where the system resides: {{ insert: param, pe-02.02_odp }}.

Restrict unescorted access to the facility where the system resides to personnel with {{ insert: param, pe-02.03_odp.01 }}.

a. Enforce physical access authorizations at {{ insert: param, pe-03_odp.01 }} by: 1. Verifying individual access authorizations before granting access to the facility; and 2. Controlling...

Enforce physical access authorizations to the system in addition to the physical access controls for the facility at {{ insert: param, pe-03.01_odp }}.

Perform security checks {{ insert: param, pe-03.02_odp }} at the physical perimeter of the facility or system for exfiltration of information or removal of system components.

Employ guards to control {{ insert: param, pe-03.03_odp }} to the facility where the system resides 24 hours per day, 7 days per week.

Use lockable physical casings to protect {{ insert: param, pe-03.04_odp }} from unauthorized physical access.

Employ {{ insert: param, pe-03.05_odp.01 }} to {{ insert: param, pe-03.05_odp.02 }} physical tampering or alteration of {{ insert: param, pe-03.05_odp.03 }} within the system.

Limit access using physical barriers.

Employ access control vestibules at {{ insert: param, pe-03.08_odp }}.

Control physical access to {{ insert: param, pe-04_odp.01 }} within organizational facilities using {{ insert: param, pe-04_odp.02 }}.

Control physical access to output from {{ insert: param, pe-05_odp }} to prevent unauthorized individuals from obtaining the output.

Link individual identity to receipt of output from output devices.

a. Monitor physical access to the facility where the system resides to detect and respond to physical security incidents; b. Review physical access logs {{ insert: param, pe-06_odp.01 }} and up...

Monitor physical access to the facility where the system resides using physical intrusion alarms and surveillance equipment.

Recognize {{ insert: param, pe-06.02_odp.01 }} and initiate {{ insert: param, pe-06.02_odp.02 }} using {{ insert: param, pe-06.02_odp.03 }}.

(a) Employ video surveillance of {{ insert: param, pe-06.03_odp.01 }}; (b) Review video recordings {{ insert: param, pe-06.03_odp.02 }} ; and (c) Retain video recordings for {{ insert: param,...

Monitor physical access to the system in addition to the physical access monitoring of the facility at {{ insert: param, pe-06.04_odp }}.

a. Maintain visitor access records to the facility where the system resides for {{ insert: param, pe-08_odp.01 }}; b. Review visitor access records {{ insert: param, pe-08_odp.02 }} ; and c. ...

Maintain and review visitor access records using {{ insert: param, pe-8.1_prm_1 }}.

Limit personally identifiable information contained in visitor access records to the following elements identified in the privacy risk assessment: {{ insert: param, pe-08.03_odp }}.

Protect power equipment and power cabling for the system from damage and destruction.

Employ redundant power cabling paths that are physically separated by {{ insert: param, pe-09.01_odp }}.

Employ automatic voltage controls for {{ insert: param, pe-09.02_odp }}.

a. Provide the capability of shutting off power to {{ insert: param, pe-10_odp.01 }} in emergency situations; b. Place emergency shutoff switches or devices in {{ insert: param, pe-10_odp.02 }}...

Provide an uninterruptible power supply to facilitate {{ insert: param, pe-11_odp }} in the event of a primary power source loss.

Provide an alternate power supply for the system that is activated {{ insert: param, pe-11.01_odp }} and that can maintain minimally required operational capability in the event of an extended loss...

Provide an alternate power supply for the system that is activated {{ insert: param, pe-11.02_odp.01 }} and that is: (a) Self-contained; (b) Not reliant on external power generation; and (c) ...

Employ and maintain automatic emergency lighting for the system that activates in the event of a power outage or disruption and that covers emergency exits and evacuation routes within the facility.

Provide emergency lighting for all areas within the facility supporting essential mission and business functions.

Employ and maintain fire detection and suppression systems that are supported by an independent energy source.

Employ fire detection systems that activate automatically and notify {{ insert: param, pe-13.01_odp.01 }} and {{ insert: param, pe-13.01_odp.02 }} in the event of a fire.

(a) Employ fire suppression systems that activate automatically and notify {{ insert: param, pe-13.02_odp.01 }} and {{ insert: param, pe-13.02_odp.02 }} ; and (b) Employ an automatic fire suppr...

Ensure that the facility undergoes {{ insert: param, pe-13.04_odp.01 }} fire protection inspections by authorized and qualified inspectors and identified deficiencies are resolved within {{ insert:...

a. Maintain {{ insert: param, pe-14_odp.01 }} levels within the facility where the system resides at {{ insert: param, pe-14_odp.03 }} ; and b. Monitor environmental control levels {{ insert: p...

Employ the following automatic environmental controls in the facility to prevent fluctuations potentially harmful to the system: {{ insert: param, pe-14.01_odp }}.

Employ environmental control monitoring that provides an alarm or notification of changes potentially harmful to personnel or equipment to {{ insert: param, pe-14.02_odp }}.

Protect the system from damage resulting from water leakage by providing master shutoff or isolation valves that are accessible, working properly, and known to key personnel.

Detect the presence of water near the system and alert {{ insert: param, pe-15.01_odp.01 }} using {{ insert: param, pe-15.01_odp.02 }}.

a. Authorize and control {{ insert: param, pe-16_prm_1 }} entering and exiting the facility; and b. Maintain records of the system components.

a. Determine and document the {{ insert: param, pe-17_odp.01 }} allowed for use by employees; b. Employ the following controls at alternate work sites: {{ insert: param, pe-17_odp.02 }}; c. A...

Position system components within the facility to minimize potential damage from {{ insert: param, pe-18_odp }} and to minimize the opportunity for unauthorized access.

Protect the system from information leakage due to electromagnetic signals emanations.

Protect system components, associated data communications, and networks in accordance with national Emissions Security policies and procedures based on the security category or classification of th...

Employ {{ insert: param, pe-20_odp.01 }} to track and monitor the location and movement of {{ insert: param, pe-20_odp.02 }} within {{ insert: param, pe-20_odp.03 }}.

Employ {{ insert: param, pe-21_odp.01 }} against electromagnetic pulse damage for {{ insert: param, pe-21_odp.02 }}.

Mark {{ insert: param, pe-22_odp }} indicating the impact level or classification level of the information permitted to be processed, stored, or transmitted by the hardware component.

a. Plan the location or site of the facility where the system resides considering physical and environmental hazards; and b. For existing facilities, consider the physical and environmental haz...