Physical Protection

Physical Protection ensures CUI systems and areas are physically secure. Locked doors, cameras, visitor escorts, access logs, and key management.

The Big Picture

The assessor will walk through your facility. They’ll check: Is the server room locked? Are visitors escorted? Can anyone walk into CUI areas? Are cameras working? Physical security is visible — gaps are immediately obvious.

The Two Themes

Facility Security (3.10.1–3.10.5) — Lock down CUI areas, monitor with cameras and alarms, escort visitors, log physical access, and manage keys and badges.

Remote Work (3.10.6) — Extend security requirements to home offices and alternate work sites where CUI is accessed.

---

All 6 Requirements

Ref	Short Name	What It Covers
3.10.1	Lock the Doors	Physical access limited to authorized individuals
3.10.2	Watch the Building	Cameras, alarms, environmental controls
3.10.3	Escort Every Visitor	Visitors escorted and monitored at all times
3.10.4	Log Physical Access	Audit logs of who accessed secured areas
3.10.5	Manage Keys and Badges	Inventory and control physical access devices
3.10.6	Home Office Security	Safeguards for CUI at alternate work sites