PES

Physical & Environmental Security

51 controls

Protect physical environments through layers of physical security and environmental controls that work together to protect both physical and digital assets from theft and damage.

SCF #	Control Name	Weight	NIST CSF	Frameworks
PES-01	Physical & Environmental Protections	9 — Critical	Govern	106
PES-01.1	Physical Security Plan (PSP)	4 — Medium	Identify	8
PES-01.2	Zone-Based Physical Security	3 — Low	Protect	2
PES-02	Physical Access Authorizations	7 — High	Protect	85
PES-02.1	Role-Based Physical Access	9 — Critical	Protect	45
PES-02.2	Dual Authorization for Physical Access	2 — Low	Protect	2
PES-03	Physical Access Control	10 — Critical	Protect	101
PES-03.1	Controlled Ingress & Egress Points	9 — Critical	Protect	27
PES-03.2	Lockable Physical Casings	5 — Medium	Protect	18
PES-03.3	Physical Access Logs	6 — Medium	Protect	61
PES-03.4	Access To Critical Systems	5 — Medium	Protect	41
PES-04	Physical Security of Offices, Rooms & Facilities	10 — Critical	Protect	39
PES-04.1	Working in Secure Areas	10 — Critical	Protect	32
PES-04.2	Searches	1 — Low	Detect	2
PES-04.3	Temporary Storage	2 — Low	Protect	1
PES-05	Monitoring Physical Access	7 — High	Detect	76
PES-05.1	Intrusion Alarms / Surveillance Equipment	9 — Critical	Detect	44
PES-05.2	Monitoring Physical Access To Critical Systems	5 — Medium	Detect	27
PES-06	Visitor Control	9 — Critical	Protect	39
PES-06.1	Distinguish Visitors from On-Site Personnel	8 — High	Protect	17
PES-06.2	Identification Requirement	8 — High	Protect	17
PES-06.3	Restrict Unescorted Access	10 — Critical	Protect	25
PES-06.4	Automated Records Management & Review	5 — Medium	Protect	14
PES-06.5	Minimize Visitor Personal Data (PD)	3 — Low	Protect	10
PES-06.6	Visitor Access Revocation	7 — High	Protect	11
PES-07	Supporting Utilities	9 — Critical	Protect	41
PES-07.1	Automatic Voltage Controls	8 — High	Protect	11
PES-07.2	Emergency Shutoff	8 — High	Protect	26
PES-07.3	Emergency Power	8 — High	Protect	32
PES-07.4	Emergency Lighting	7 — High	Protect	36
PES-07.5	Water Damage Protection	8 — High	Protect	43
PES-07.6	Automation Support for Water Damage Protection	5 — Medium	Protect	12
PES-07.7	Redundant Cabling	2 — Low	Protect	2
PES-08	Fire Protection	7 — High	Protect	45
PES-08.1	Fire Detection Devices	9 — Critical	Detect	21
PES-08.2	Fire Suppression Devices	3 — Low	Protect	20
PES-08.3	Automatic Fire Suppression	5 — Medium	Respond	16
PES-09	Temperature & Humidity Controls	9 — Critical	Protect	43
PES-09.1	Monitoring with Alarms / Notifications	8 — High	Detect	17
PES-10	Delivery & Removal	8 — High	Protect	49
PES-11	Alternate Work Site	8 — High	Protect	38
PES-12	Equipment Siting & Protection	9 — Critical	Protect	49
PES-12.1	Transmission Medium Security	9 — Critical	Protect	53
PES-12.2	Access Control for Output Devices	8 — High	Protect	45
PES-13	Information Leakage Due To Electromagnetic Signals Emanations	5 — Medium	Protect	12
PES-14	Asset Monitoring and Tracking	6 — Medium	Detect	7
PES-15	Electromagnetic Pulse (EMP) Protection	1 — Low	Protect	3
PES-16	Component Marking	3 — Low	Protect	4
PES-17	Proximity Sensor	9 — Critical	Protect	0
PES-18	On-Site Client Segregation	6 — Medium	Protect	5
PES-19	Physical Access Device Inventories	9 — Critical	Protect	1

The Secure Controls Framework (SCF) is maintained by SCF Council. Use of SCF content is subject to the SCF Terms & Conditions.

Physical & Environmental Security

Manage SCF Controls in SCF Connect