← Controls / PE

PE-04 Access Control for Transmission

Physical and Environmental Protection

Moderate High

Description

Control physical access to [Assignment: organization-defined system distribution and transmission lines] within organizational facilities using [Assignment: organization-defined security controls].

Supplemental Guidance

Security controls applied to system distribution and transmission lines prevent accidental damage, disruption, and physical tampering. Such controls may also be necessary to prevent eavesdropping or modification of unencrypted transmissions. Security controls used to control physical access to system distribution and transmission lines include disconnected or locked spare jacks, locked wiring closets, protection of cabling by conduit or cable trays, and wiretapping sensors.

Changes from Rev 4

Title changed from 'Access Control for Transmission Medium' Changes parameter text from 'safeguards' to 'controls' Discussion includes additional examples

Patterns that use this control (2)

Grouped by the emphasis each pattern gives it.

Compliance Mappings

ISO 27001:2022

A.7.1A.7.2A.7.12

ISO 27002:2022

7.17.12

COBIT 2019

DSS01DSS05

NIST CSF 2.0

PR.AA-06

CSA CCM v4

DCS-12

CSA AICM v1

DCS-12

BSI IT-Grundschutz

INF.1INF.2

ANSSI

Hygiene.26Hygiene.37SecNumCloud.12.2

FINMA Circular 2023/1

IV.C(62)

OSFI B-13

B-13.3.2

EU GDPR

Art.32(1)(b)

BIO2

7.17.12

RBI CSF

Annex1.3ITGRCA.18

FISC Security Guidelines

FISC.F1

HKMA TM-E-1

TME1.5.1

DNB Good Practice

DNB.21.1

SAMA CSF

3.7

NCA ECC

1-11

UAE IA

T6

CBB TM

TM-10

Qatar NIA

PS

CBE CSF

CTO-10

SA JS2

JS2-PE

CBN CSF

Part10

BoG CISD

CISD-XIV

BoM CTRM

3.5

IOSCO Cyber Resilience

PROT-5

FFIEC IS

II.C.8

HIPAA Security Rule

§164.310(a)(1)

ECB CROE

CROE.2.3.6

EBA ICT Guidelines

3.4.3

SEBI CSCRF

PR.PE

BOT Cyber Resilience

Ch2.8

CMMC 2.0

PE

NERC CIP

CIP-006-6

10 CFR 73.54

RG5.71-B-PE

IEEE 1686-2022

5.9

API 1164

Sec 14

PCI PTS v6

AC

FIPS 140-3

FIPS 140-3 §7.7

PCI HSM

7

Solvency II

EIOPA-ICT-4.5

Lloyd's Minimum Standards

PHYS.1

HITRUST CSF v11

08.a

ISO 27799

11.1

Basel SCO60

SCO60.63

ISO 17799 (legacy)

9.2.3

COBIT 4.1 (legacy)

DS5.7DS12.2