Physical Security CMMC

Physical Security Measures are an Important Part of Cybersecurity

Our data may be stored digitally but fundamentally it is still very much linked to the physical world. Here is how to bolster cybersecurity through physical security.
Join our newsletter:

What is Physical Security?

Physical security involves security measures that deny unauthorized access to facilities and equipment. It also entails protecting personnel from harm and property from damage.

How Physical Security Relates to Cybersecurity

Woman Server Room
In cybersecurity, we focus on protecting digital assets. These digital assets however are all stored on physical devices. Without physically securing those devices then true cybersecurity can not be achieved.

What are Physical Security Measures?

In the defense-in-depth strategy, physical security measures are your first line of defense. They keep unauthorized persons from walking into your facility and stealing or damaging your systems. Physical security measures including fences, locked doors, surveillance cameras, and identity badges.

Common Physical Security Controls

Badge Entry
I will use some of the physical security requirements from the U.S. Department of Defense’s new cybersecurity maturity model certification (CMMC) to demonstrate the physical security controls every organization should implement.
  • Limit who can enter your facility (e.g, using a key card entry system)
  • Escort guests while they are at your facility (e.g., sign them in at the front desk, give them a visitor badge, and assign an escort)
  • Record who enters and exits your facility (e.g., use a key card entry system with logging capabilities and have visitors sign-in on a sign-in sheet)
  • Monitor your facility (e.g, using surveillance cameras) and protect support infrastructure (e.g., fuze box and ethernet cables)
The CMMC controls I referenced above were: PE.1.131, PE.1.132, PE.1.133, PE.1.134, and PE.2.135.
 

Quick & Simple

Discover Our Cybersecurity Compliance Solutions:

Whether you need to meet and maintain your compliance requirements, help your clients meet them, or verify supplier compliance we have the expertise and solution for you

NIST SP 800-171 & CMMC Compliance App

NIST SP 800-171 & CMMC Compliance

Become compliant, provide compliance services, or verify partner compliance with NIST SP 800-171 and CMMC requirements.
Learn More
HIPAA Compliance App

HIPAA Compliance

Become compliant, provide compliance services, or verify partner compliance with HIPAA security rule requirements.
Learn More
FAR 52.204-21 Compliance App

FAR 52.204-21 Compliance

Become compliant, provide compliance services, or verify partner compliance with FAR 52.204-21 Basic Safeguarding of Covered Contractor Information Systems requirements.
Learn More
ISO 27001 Compliance App

ISO 27001 Compliance

Become compliant, provide compliance services, or verify partner compliance with ISO 27001 requirements.
Learn More