PES

Physical & Environmental Security

51 controls

Protect physical environments through layered physical security and environmental controls that safeguard physical and digital assets from unauthorized access, theft, damage and disruption.

SCF #	Control Name	Weight	NIST CSF	Frameworks
PES-01	Physical & Environmental Security Policy	10 — Critical	Govern	38
PES-02	Physical & Environmental Protections	9 — Critical	Govern	98
PES-03	Physical Security Plan (PSP)	4 — Medium	Identify	9
PES-04	Zone-Based Physical Security	3 — Low	Protect	3
PES-05	Alternate Work Site	8 — High	Protect	33
PES-06	Physical Access Authorizations	7 — High	Protect	81
PES-07	Role-Based Physical Access	9 — Critical	Protect	47
PES-07.1	Dual Authorization for Physical Access	2 — Low	Protect	2
PES-08	Physical Access Control	10 — Critical	Protect	92
PES-08.1	Physical Access Device Inventories	9 — Critical	Protect	5
PES-09	Controlled Ingress & Egress Points	9 — Critical	Protect	20
PES-09.1	Physical Access Logs	6 — Medium	Protect	57
PES-09.2	Personnel Searches	1 — Low	Detect	3
PES-10	Physical Security of Offices, Rooms & Facilities	10 — Critical	Protect	39
PES-11	Working in Secure Areas	10 — Critical	Protect	26
PES-11.1	On-Site Client Segregation	6 — Medium	Protect	3
PES-12	Access To Critical Systems	5 — Medium	Protect	42
PES-12.1	Lockable Physical Casings	5 — Medium	Protect	13
PES-13	Monitoring Physical Access	7 — High	Detect	70
PES-13.1	Intrusion Alarms / Surveillance Equipment	9 — Critical	Detect	46
PES-13.2	Monitoring Physical Access To Critical Systems	5 — Medium	Detect	28
PES-14	Visitor Control	9 — Critical	Protect	36
PES-14.1	Distinguish Visitors from On-Site Personnel	8 — High	Protect	16
PES-14.2	Identification Requirement	8 — High	Protect	17
PES-14.3	Restrict Unescorted Access	10 — Critical	Protect	23
PES-14.4	Automated Records Management & Review	5 — Medium	Protect	12
PES-14.5	Minimize Visitor Personal Data (PD)	3 — Low	Protect	14
PES-14.6	Visitor Access Revocation	7 — High	Protect	11
PES-15	Delivery & Removal	8 — High	Protect	40
PES-15.1	Temporary Storage	2 — Low	Protect	0
PES-16	Equipment Siting & Protection	9 — Critical	Protect	47
PES-16.1	Transmission Medium Security	9 — Critical	Protect	41
PES-17	Access Control for Output Devices	8 — High	Protect	33
PES-18	Component Marking	3 — Low	Protect	6
PES-19	Asset Monitoring and Tracking	6 — Medium	Detect	7
PES-20	Supporting Utilities	9 — Critical	Protect	37
PES-20.1	Automatic Voltage Controls	8 — High	Protect	14
PES-21	Emergency Shutoff	8 — High	Protect	25
PES-22	Emergency Power	8 — High	Protect	34
PES-23	Emergency Lighting	7 — High	Protect	32
PES-24	Water Damage Protection	8 — High	Protect	33
PES-24.1	Automation Support for Water Damage Protection	5 — Medium	Protect	9
PES-25	Redundant Cabling	2 — Low	Protect	5
PES-26	Fire Protection	7 — High	Protect	34
PES-27	Fire Detection Devices	9 — Critical	Detect	18
PES-28	Fire Suppression Devices	3 — Low	Protect	19
PES-28.1	Automatic Fire Suppression	5 — Medium	Respond	13
PES-29	Temperature & Humidity Controls Monitoring	9 — Critical	Protect	35
PES-29.1	Temperature & Humidity Controls Alerting	8 — High	Detect	14
PES-30	Information Leakage Due To Electromagnetic Signals Emanations	5 — Medium	Protect	8
PES-31	Electromagnetic Pulse (EMP) Protection	1 — Low	Protect	3

The Secure Controls Framework (SCF) is maintained by SCF Council. Use of SCF content is subject to the SCF Terms & Conditions.

Physical & Environmental Security

Manage SCF Controls in SCF Connect