Physical Protection · PE.L1-b.1.viii(c)
Physical access to equipment is limited to authorized individuals
An assessment objective under requirement PE.L1-b.1.viii, Limit Physical Access, in the Physical Protection domain.
Objective Statement
Physical access to equipment is limited to authorized individuals
Objective identity
- Framework
- Cybersecurity Maturity Model Certification · Level 1
- Domain
- Physical Protection (PE)
- Objective ID
- PE.L1-b.1.viii(c)
- Parent Requirement
- PE.L1-b.1.viii · Limit physical access to systems and equipment
Assessment Procedures
The official government assessment method for this objective, exactly as printed in the DoD CMMC Assessment Guide, Level 1, which reprints it from NIST SP 800-171A (June 2018). An assessor examines artifacts, interviews people, and tests mechanisms to determine the result.
Examine
- Physical and environmental protection policy
- Procedures addressing physical access authorizations
- System security plan
- Authorized personnel access list
- Authorization credentials
- Physical access list reviews
- Physical access termination records and associated documentation
- Other relevant documents or records
Interview
- Personnel with physical access authorization responsibilities
- Personnel with physical access to system facility
- Personnel with information security responsibilities
Test
- Organizational processes for physical access authorizations
- Mechanisms supporting or implementing physical access authorizations
Related Objectives
Source Authority
- Primary Authority
- NIST SP 800-171A (June 2018)
- Official Text
- Requirement Authority
- FAR 52.204-21(b)(1)
- Program Authority
- 32 CFR 170.15(c)(1)(ii) Table 2
- Framework Version
- CMMC Assessment Guide, Level 1 v2.13 (September 2024)
- Effective Date
- 2024-12-16
- Last Verified
- 2026-10-02
Cite This Page
“CMMC PE.L1-b.1.viii(c): Physical access to equipment is limited to authorized individuals.” AssessrLog, a product of ProfytAI Pte. Ltd.. Last verified 2026-10-02. https://assessrlog.com/cmmc/objectives/physical-access-to-equipment-is-limited-to-authorized-individuals/
Build the Record Behind This
AssessrLog logs the determination for this objective with its evidence and source record, so your Level 1 self-assessment stays traceable and ready to affirm. The MET, NOT MET, or N/A call is always yours to make.