ComplianceNIST 800-53 control

NIST-PE-2 Physical Access Authorizations

Official page ↗
Framework
NIST SP 800-53 rev5 (5.2.0)
Family
PE Physical and Environmental Protection
Control
PE-2

Control statement

a. Develop, approve, and maintain a list of individuals with authorized access to the facility where the system resides; b. Issue authorization credentials for facility access; c. Review the access list detailing authorized facility access by individuals [Assignment: frequency] ; and d. Remove individuals from the facility access list when access is no longer required.

Discussion

Physical access authorizations apply to employees and visitors. Individuals with permanent physical access authorization credentials are not considered visitors. Authorization credentials include ID badges, identification cards, and smart cards. Organizations determine the strength of authorization credentials needed consistent with applicable laws, executive orders, directives, regulations, policies, standards, and guidelines. Physical access authorizations may not be necessary to access certain areas within facilities that are designated as publicly accessible.

Related

Related control · Compliance (14)

  • NIST-AT-3 Role-based Training NIST 800-53 control
  • NIST-AU-9 Protection of Audit Information NIST 800-53 control
  • NIST-IA-4 Identifier Management NIST 800-53 control
  • NIST-MA-5 Maintenance Personnel NIST 800-53 control
  • NIST-MP-2 Media Access NIST 800-53 control
  • NIST-PE-3 Physical Access Control NIST 800-53 control
  • NIST-PE-4 Access Control for Transmission NIST 800-53 control
  • NIST-PE-5 Access Control for Output Devices NIST 800-53 control
  • NIST-PE-8 Visitor Access Records NIST 800-53 control
  • NIST-PM-12 Insider Threat Program NIST 800-53 control
  • NIST-PS-3 Personnel Screening NIST 800-53 control
  • NIST-PS-4 Personnel Termination NIST 800-53 control
  • NIST-PS-5 Personnel Transfer NIST 800-53 control
  • NIST-PS-6 Access Agreements NIST 800-53 control

Referenced by Compliance · enhancement of (3)

  • NIST-PE-2(1) Access by Position or Role NIST 800-53 enhancement
  • NIST-PE-2(2) Two Forms of Identification NIST 800-53 enhancement
  • NIST-PE-2(3) Restrict Unescorted Access NIST 800-53 enhancement

Referenced by Compliance · has member (1)

  • NIST-PE Physical and Environmental Protection NIST 800-53 family

Referenced by Compliance · related control (19)

  • NIST-AC-2 Account Management NIST 800-53 control
  • NIST-AC-6(1) Authorize Access to Security Functions NIST 800-53 enhancement
  • NIST-AT-3(2) Physical Security Controls NIST 800-53 enhancement
  • NIST-AU-9 Protection of Audit Information NIST 800-53 control
  • NIST-IA-2 Identification and Authentication (Organizational Users) NIST 800-53 control
  • NIST-IA-4 Identifier Management NIST 800-53 control
  • NIST-IA-5 Authenticator Management NIST 800-53 control
  • NIST-MA-5 Maintenance Personnel NIST 800-53 control
  • NIST-MP-2 Media Access NIST 800-53 control
  • NIST-PE-3 Physical Access Control NIST 800-53 control
  • NIST-PE-4 Access Control for Transmission NIST 800-53 control
  • NIST-PE-5 Access Control for Output Devices NIST 800-53 control
  • NIST-PE-8 Visitor Access Records NIST 800-53 control
  • NIST-PM-12 Insider Threat Program NIST 800-53 control
  • NIST-PS-2 Position Risk Designation NIST 800-53 control
  • NIST-PS-3 Personnel Screening NIST 800-53 control
  • NIST-PS-4 Personnel Termination NIST 800-53 control
  • NIST-PS-5 Personnel Transfer NIST 800-53 control
  • NIST-PS-6 Access Agreements NIST 800-53 control