BaselineWatch
Desk
Your fleet and your work Fleetyour releases and the hardware they run onTriagewhat needs a decisionWatchlistthe products and platforms you runSaved searchesthe lists you come back to
This instance Sourceswhat is read, how often, under what termsDigestthe daily or weekly summary, and alerts
How it is drawn Appearancethe look and the colour schemeBrandingthe mark this instance wears
Owner sign-in

03.10.01 Physical Access Authorizations

NIST SP 800-171 Rev 3 (CUI; CMMC Level 2) OSCAL 1.1.0 against OSCAL 1.1.0
All changes in this version
unchanged 03.10 Physical Protection

Title

Physical Access Authorizations

Control

a. Develop, approve, and maintain a list of individuals with authorized access to the facility where the system resides.
b. Issue authorization credentials for facility access.
c. Review the facility access list [Assignment: frequency].
d. Remove individuals from the facility access list when access is no longer required.

Discussion

A facility can include one or more physical locations containing systems or system components that process, store, or transmit CUI. Physical access authorizations apply to employees and visitors. Individuals with permanent physical access authorization credentials are not considered visitors. Authorization credentials include identification badges, identification cards, and smart cards. Organizations determine the strength of the authorization credentials consistent with applicable laws, Executive Orders, directives, regulations, policies, standards, and guidelines. Physical access authorizations may not be necessary to access certain areas within facilities that are designated as publicly accessible.

Parameters

A.03.10.01.ODP.01: frequency

Assessment objective

a list of individuals with authorized access to the facility where the system resides is developed.