PE-18(1): Facility Site

Control Family:

Physical And Environmental Protection

Parent Control:

PE-18: Location Of Information System Components

Priority:

P3: Implement P3 security controls after implementation of P1 and P2 controls.

CSF v1.1 References:

PR.IP-5

Baselines:

(Not part of any baseline)

Control is withdrawn in the next version of this control set and incorporated into: PE-23: Facility Location.

Control Statement

The organization plans the location or site of the facility where the information system resides with regard to physical and environmental hazards and for existing facilities, considers the physical and environmental hazards in its risk mitigation strategy.