NIST SP 800-171 REV. 3 03.10.07 Physical Access Control

Requirement

1. Enforce physical access authorizations at entry and exit points to the facility where the system resides by:
   1. Verifying individual physical access authorizations before granting access to the facility and
   2. Controlling ingress and egress with physical access control systems, devices, or guards.
2. Maintain physical access audit logs for entry or exit points.
3. Escort visitors, and control visitor activity.
4. Secure keys, combinations, and other physical access devices.
5. Control physical access to output devices to prevent unauthorized individuals from obtaining access to CUI.

Explanation

Alternate work sites include the private residences of employees or other facilities designated by the organization. Alternate work sites can provide readily availabl alternate locations during contingency operations. Organizations can define different security requirements for specific alternate work sites or types of sites, depending on the work-related activities conducted at the sites. Assessing the effectiveness of the requirements and providing a means to communicate incidents at alternate work sites supports the contingency planning activities of organizations.