|

controlPE-6

Monitoring Physical Access (PE-6)

Monitor physical access to the facility where the system resides to detect and respond to physical security incidents; Review physical access logs [organization-defined] and upon occurrence of [organization-defined] ; and Coordinate results of reviews and investigations with the organizational incident response capability.

Security Baselines

LOWMODERATEHIGH

physical-securityenvironmentalfacilities

Why These Connect

Maps To6

These are equivalent or closely aligned requirements in other frameworks.

Baselined In3

This control is included in the linked security baseline (LOW, MODERATE, or HIGH).

Supports19

These related controls work together — a change to one may affect the others.

Enhances4

These enhancements add specific capabilities or refinements to the base control.

Related Controls(11)

AU-6Audit Record Review, Analysis, and Reporting (AU-6)

AU-9Protection of Audit Information (AU-9)

CA-7Continuous Monitoring (CA-7)

IR-4Incident Handling (IR-4)

IR-5Incident Monitoring (IR-5)

IR-8Incident Response Plan (IR-8)

AU-2Event Logging (AU-2)

AU-12Audit Record Generation (AU-12)

CP-10System Recovery and Reconstitution (CP-10)

PE-8Visitor Access Records (PE-8)

PM-31Continuous Monitoring Strategy (PM-31)

Cross-Framework Mappings(6)

PR.AA-06PR.AA-06Final

NIST OLIR informative reference — Cybersecurity Framework v2.0 to SP 800-53 Rev 5

DE.CM-02DE.CM-02Final

NIST OLIR informative reference — Cybersecurity Framework v2.0 to SP 800-53 Rev 5

ISO 27001ISO/IEC 27001:20222 mappingsFinal

NIST OLIR informative reference — SP 800-53 Rev 5 to ISO/IEC 27001:2022

HIPAAHIPAA Security Rule1 mappingFinal

NIST OLIR informative reference — HIPAA Security Rule to SP 800-53 Rev 5

PR.AA-06PR.AA-06Final

NIST OLIR informative reference — Cybersecurity Framework v2.0 to SP 800-53 Rev 5

DE.CM-02DE.CM-02Final

NIST OLIR informative reference — Cybersecurity Framework v2.0 to SP 800-53 Rev 5

Organization-Defined Parameters(2)

Assignmentorganization-defined frequency

Assignmentorganization-defined events

Control Enhancements(4)

PE-6(1)Intrusion Alarms and Surveillance Equipment (PE-6(1))

PE-6(2)Automated Intrusion Recognition and Responses (PE-6(2))

PE-6(3)Video Surveillance (PE-6(3))

PE-6(4)Monitoring Physical Access to Systems (PE-6(4))

See Also

@SP 800-53 Overview ⚖Compare Baselines