CMMC Practice PE.L2-3.10.2

Protect and monitor the physical facility and support infrastructure for organizational systems.

Monarch ISC Guidance

"Protect and monitor" can mean a lot of things! Typically, an organization will need to deploy cameras to monitor ingress/egress points in the facility, and also critical areas within the facility. This video should be able to record video for up to a month or longer, as determined by a risk assessment. Protecting and monitoring the physical infrastructure extends to environmental controls, such as proper HVAC, fire suppression, water sensors, and monitoring of these systems. The guidance and clarification provided by CMMC also point out the need to protect network cabling using conduits, and disconnecting or protecting unused network ports. Larger organizations may need to consider security guards for video and ingress/egress monitoring, and active network monitoring for unauthorized devices on your network and wiretap sensors.

Security Catapult

Be prepared for CMMC

Our Q&A assessment tool is designed by security advisors for MSPs and DoD contractors of all sizes.

Try now for free

Security Catapult

Understand your gaps

See compliance gaps, compliance scores and proactive security tasks in a single interface.

Try now for free

Security Catapult

Validate NIST SP 800-171

Based on your CMMC answers, we let you know where you stand on NIST.

Try now for free

Security Catapult

Build a plan of action

Track your burn down and stay on top of security needs.

Try now for free

Security Catapult

Build your policy

Say goodbye to maintaining a security policy. We do it for you.

Try now for free

Discussion From Source

DRAFT NIST SP 800-171 R2 Monitoring of physical access includes publicly accessible areas within organizational facilities. This can be accomplished, for example, by the employment of guards; the use of sensor devices; or the use of video surveillance equipment such as cameras. Examples of support infrastructure include system distribution, transmission, and power lines. Security controls applied to the support infrastructure prevent accidental damage, disruption, and physical tampering. Such controls may also be necessary to prevent eavesdropping or modification of unencrypted transmissions. Physical access controls to support infrastructure include locked wiring closets; disconnected or locked spare jacks; protection of cabling by conduit or cable trays; and wiretapping sensors.