PE-5 (3) PE-5 (3) CCI-002937 blank blank The organization NIST has not conducting the allocated this inspection/assessment AP. Therefore, inspects a sampling of this AP is not information system applicable. components to ensure the organization being inspected/assessed marks all devices if the organizational facility contains classified information indicating the appropriate security marking of the information permitted to be output from the device. DoD has defined the information system output devices as all devices if the organizational facility contains classified information. PE-5 (3) PE-5 (3) CCI-002938 blank The organization NIST has not inspected/assessed is allocated this automatically AP. Therefore, compliant with this CCI this AP is not because they are applicable. covered at the DoD level. DoD has defined the information system output devices as all devices if the organizational facility contains classified information. PE-6 (1) PE-6 (1) CCI-000942 High High High The organization Moderate Moderate Moderate conducting the inspection/assessment will observe and interview security personnel conducting monitoring activities to validate the organization is actively monitoring all physical intrusion alarms and surveillance equipment.
PE-5 (3) PE-5 (3) CCI-002937 blank blank The organization conducting the inspection/assessment inspects a sampling of information system components to ensure the organization being inspected/assessed marks all devices if the organizational facility contains classified information indicating the appropriate security marking of the information permitted to be output from the device. DoD has defined the information system output devices as all devices if the organizational facility contains classified information. NIST has not allocated this AP. Therefore, this AP is not applicable. PE-5 (3) PE-5 (3) CCI-002938 blank The organization inspected/assessed is automatically compliant with this CCI because they are covered at the DoD level. DoD has defined the information system output devices as all devices if the organizational facility contains classified information. NIST has not allocated this AP. Therefore, this AP is not applicable. PE-6 (1) PE-6 (1) CCI-000942 High Moderate High Moderate High Moderate The organization conducting the inspection/assessment will observe and interview security personnel conducting monitoring activities to validate the organization is actively monitoring all physical intrusion alarms and surveillance equipment.
RMF_Physical-And-Environmental-Protection-Plan.docx