PE-2 (3) PE-2 (3) CCI-002913 blank blank The organization NIST has not conducting the allocated this inspection/assessment AP. Therefore, obtains and examines this AP is not the physical security applicable. policy to ensure the organization being inspected/assessed has selected one or more of the physical security requirements that must be met before unescorted access to the facility where the information system resides is granted PE-2 (3) PE-2 (3) CCI-002914 blank blank blank The organization NIST has not conducting the allocated this inspection/assessment AP. Therefore, obtains and examines this AP is not the documented applicable. credentials to ensure the organization being inspected/assessed defines the credentials required for personnel to have unescorted access to the facility where the information system resides. DoD has determined the credentials are not appropriate to define at the Enterprise level. PE-2 PE-2 (a) CCI-000912 High High High The organization Moderate Moderate Moderate conducting the Low Low Low inspection/assessment obtains and examines the list of personnel with authorized access to facilities where information systems reside to ensure it is current within every 90 days. The review process should also determine if the organization has identified and officially designated its publicly accessible areas where access authorization is not required. DoD has defined the frequency as every 90 days.
PE-2 (3) PE-2 (3) CCI-002913 blank blank The organization conducting the inspection/assessment obtains and examines the physical security policy to ensure the organization being inspected/assessed has selected one or more of the physical security requirements that must be met before unescorted access to the facility where the information system resides is granted NIST has not allocated this AP. Therefore, this AP is not applicable. PE-2 (3) PE-2 (3) CCI-002914 blank blank blank The organization conducting the inspection/assessment obtains and examines the documented credentials to ensure the organization being inspected/assessed defines the credentials required for personnel to have unescorted access to the facility where the information system resides. DoD has determined the credentials are not appropriate to define at the Enterprise level. NIST has not allocated this AP. Therefore, this AP is not applicable. PE-2 PE-2 (a) CCI-000912 High Moderate Low High Moderate Low High Moderate Low The organization conducting the inspection/assessment obtains and examines the list of personnel with authorized access to facilities where information systems reside to ensure it is current within every 90 days. The review process should also determine if the organization has identified and officially designated its publicly accessible areas where access authorization is not required. DoD has defined the frequency as every 90 days.