PE-2(1)—Access By Position Or Role
>Control Description
Role-based authorizations for physical access should include federal (e.g., agency/department employees) and non-federal employees (e.g., suppliers, developers, system integrators, external system service providers, and other ICT/OT-related service providers). When role-based authorization is used, the type and level of access allowed for that role or position must be pre-established and documented.
>Cross-Framework Mappings
Ask AI
Configure your API key to use AI features.