Physical Protection · PE.L1-b.1.ix(f)
Physical access devices are managed
An assessment objective under requirement PE.L1-b.1.ix, Manage Visitors & Physical Access, in the Physical Protection domain.
Objective Statement
Physical access devices are managed
Objective identity
- Framework
- Cybersecurity Maturity Model Certification · Level 1
- Domain
- Physical Protection (PE)
- Objective ID
- PE.L1-b.1.ix(f)
- Parent Requirement
- PE.L1-b.1.ix · Escort visitors, log physical access, manage devices
Assessment Procedures
The official government assessment method for this objective, exactly as printed in the DoD CMMC Assessment Guide, Level 1, which reprints it from NIST SP 800-171A (June 2018). An assessor examines artifacts, interviews people, and tests mechanisms to determine the result.
Examine
- Physical and environmental protection policy
- Procedures addressing physical access control
- System security plan
- Physical access control logs or records
- Inventory records of physical access control devices
- System entry and exit points
- Records of key and lock combination changes
- Storage locations for physical access control devices
- Physical access control devices
- List of security safeguards controlling access to designated publicly accessible areas within facility
- Other relevant documents or records
Interview
- Personnel with physical access control responsibilities
- Personnel with information security responsibilities
Test
- Organizational processes for physical access control
- Mechanisms supporting or implementing physical access control
- Physical access control devices
Related Objectives
Source Authority
- Primary Authority
- NIST SP 800-171A (June 2018)
- Official Text
- Requirement Authority
- FAR 52.204-21(b)(1)
- Program Authority
- 32 CFR 170.15(c)(1)(ii) Table 2
- Framework Version
- CMMC Assessment Guide, Level 1 v2.13 (September 2024)
- Effective Date
- 2024-12-16
- Last Verified
- 2026-10-02
Cite This Page
“CMMC PE.L1-b.1.ix(f): Physical access devices are managed.” AssessrLog, a product of ProfytAI Pte. Ltd.. Last verified 2026-10-02. https://assessrlog.com/cmmc/objectives/physical-access-devices-are-managed/
Build the Record Behind This
AssessrLog logs the determination for this objective with its evidence and source record, so your Level 1 self-assessment stays traceable and ready to affirm. The MET, NOT MET, or N/A call is always yours to make.