PE.L2-3.10.1 Limit physical access
Limiting physical access to systems, equipment and their operating environments to authorized individuals with badges, locks and access lists. A 5-point requirement and the Level 2 form of a Level 1 safeguard.
PE Physical protection
The six CMMC Level 2 physical protection requirements: limiting and monitoring physical access, escorting visitors, keeping physical access logs, managing keys and badges, and safeguarding CUI at alternate work sites.
PE.L2-3.10.2 Monitor facility
Protecting and monitoring the physical facility and its support infrastructure, such as power and network cabling, with guards, cameras, sensors or alarms. A 5-point requirement in the scoring methodology.
PE.L2-3.10.3 Escort visitors
Escorting visitors and monitoring their activity, with visitor badges and escorts at all times. A Level 1 safeguard and one of six requirements that can never be left on a POA&M.
PE.L2-3.10.4 Physical access logs
Maintaining audit logs of physical access, through sign-in sheets or electronic badge readers, and retaining them for the period the organization defines. A Level 1 safeguard that can never be left on a POA&M.
PE.L2-3.10.5 Manage physical access
Identifying, controlling and managing physical access devices such as keys, locks, badges and key cards, including updates when people change roles or leave. A Level 1 safeguard that can never be left on a POA&M.
PE.L2-3.10.6 Alternative work sites
Defining and enforcing safeguards for CUI at alternate work sites such as employees' homes and travel locations, from locked drawers to encryption, logging and access controls.
