Physical Security CMMC

Physical Security Measures are an Important Part of Cybersecurity

Our data may be stored digitally but fundamentally it is still very much linked to the physical world. Here is how to bolster cybersecurity through physical security.

Join our newsletter:

What is Physical Security?

Physical security involves security measures that deny unauthorized access to facilities and equipment. It also entails protecting personnel from harm and property from damage.

How Physical Security Relates to Cybersecurity

Woman Server Room
In cybersecurity, we focus on protecting digital assets. These digital assets however are all stored on physical devices. Without physically securing those devices then true cybersecurity can not be achieved.

What are Physical Security Measures?

In the defense-in-depth strategy, physical security measures are your first line of defense. They keep unauthorized persons from walking into your facility and stealing or damaging your systems. Physical security measures including fences, locked doors, surveillance cameras, and identity badges.

Common Physical Security Controls

Badge Entry
I will use some of the physical security requirements from the U.S. Department of Defense’s new cybersecurity maturity model certification (CMMC) to demonstrate the physical security controls every organization should implement.
  • Limit who can enter your facility (e.g, using a key card entry system)
  • Escort guests while they are at your facility (e.g., sign them in at the front desk, give them a visitor badge, and assign an escort)
  • Record who enters and exits your facility (e.g., use a key card entry system with logging capabilities and have visitors sign-in on a sign-in sheet)
  • Monitor your facility (e.g, using surveillance cameras) and protect support infrastructure (e.g., fuze box and ethernet cables)
The CMMC controls I referenced above were: PE.1.131, PE.1.132, PE.1.133, PE.1.134, and PE.2.135.

Discover Our NIST SP 800-171 & CMMC 2.0 Solutions:


Compliance Accelerator

Power through compliance. Meet and maintain your NIST SP 800-171 & CMMC 2.0 compliance requirements.

Quantum Assessor

Transform your business. Create new revenue streams and provide scalability for your NIST SP 800-171 and CMMC 2.0 services.

Supply Chain Verifier

Trust is everything. Verify, monitor, and support subcontactor compliance.