Skip to content
Catalogs
XCCDF
Traditional Security Checklist
PH-01.03.01
Physical Security Program - Physical Security Plan (PSP) and/or Systems Security Plan (SSP) Development and Implementation with Consideration/Focus on Protection of Information System Assets in the Physical Environment
Physical Security Program - Physical Security Plan (PSP) and/or Systems Security Plan (SSP) Development and Implementation with Consideration/Focus on Protection of Information System Assets in the Physical Environment An XCCDF Rule
Physical Security Program - Physical Security Plan (PSP) and/or Systems Security Plan (SSP) Development and Implementation with Consideration/Focus on Protection of Information System Assets in the Physical Environment
Low Severity
<VulnDiscussion>Failure to have a well-documented Physical Security/Systems Security program will result in an increased risk to DoD Information Systems; including personnel, equipment, media, material and documents.
REFERENCES:
DoD 5220.22-M (NISPOM), Incorporating Change 2, 18 May 2016
Chapter 8, Section 1, paragraphs 8-100, 8-101, 8-102, 8-301 and 8-302.b.&c.
DoD 5200.8-R Physical Security Program
Chapters 1, 2 and 3
DoD Manual 5200.08 Volume 3, Physical Security Program: Access to DoD Installations,
2 January 2019
NIST Special Publication 800-53 (SP 800-53)
Controls: PE-1 through PE-20 and PL-1 & PL-2
CJCSI 6510.01F, INFORMATION ASSURANCE (IA) AND SUPPORT TO COMPUTER NETWORK DEFENSE (CND), 9 February 2011
Encl A, para 5.a.(1), Encl C, para: 24.j., 27., 28.b., and 34. </VulnDiscussion><FalsePositives></FalsePositives><FalseNegatives></FalseNegatives><Documentable>false</Documentable><Mitigations></Mitigations><SeverityOverrideGuidance></SeverityOverrideGuidance><PotentialImpacts></PotentialImpacts><ThirdPartyTools></ThirdPartyTools><MitigationControl></MitigationControl><Responsibility></Responsibility><IAControls></IAControls>