CMMC 1.0 Practice PE.2.135 Requirement:
Protect and monitor the physical facility and support infrastructure for organizational systems.
CMMC 1.0 PE.2.135 Requirement Explanation:
By limiting access to your facility and monitoring it with security cameras you can reduce the risk of security incidents. Ensuring that the physical infrastructure supporting your IT systems is protected is critical to keeping your IT systems functioning.
Example CMMC 1.0 PE.2.135 Implementation:
Ensure that the electrical closet or cabinet in your office is locked. Try to run power and network cables in a manner that reduces the risk of them being unplugged. Ensure that your server room is locked and your facility entrances are locked. Use surveillance cameras to monitor your facility.
CMMC 1.0 PE.2.135 Scenario(s):
- Scenario 1:
Your company needs to monitor its facilities. Security guards are too expensive and sensor devices can't capture images. You decide to deploy surveillance cameras to monitor your facilities.
- Scenario 2:
Your server room contains important network devices and electrical power controls. These are the back bone of your IT systems. To better protect them you ensure that only a few individuals can access the room and always keep it locked.
Quick & Simple
Discover Our Cybersecurity Compliance Solutions:
Whether you need to meet and maintain your compliance requirements, help your clients meet them, or verify supplier compliance we have the expertise and solution for you
NIST SP 800-171 & CMMC Compliance
Become compliant, provide compliance services, or verify partner compliance with NIST SP 800-171 and CMMC requirements.
HIPAA Compliance
Become compliant, provide compliance services, or verify partner compliance with HIPAA security rule requirements.
FAR 52.204-21 Compliance
Become compliant, provide compliance services, or verify partner compliance with FAR 52.204-21 Basic Safeguarding of Covered Contractor Information Systems requirements.
ISO 27001 Compliance
Become compliant, provide compliance services, or verify partner compliance with ISO 27001 requirements.