PE.L2-3.10.2
Monitor Facility
Source and approval
CMMC Assessment Guide — Level 2 · Revision 2.13
Publisher approved · Complete cited source edition 2026-10-31
Read the official guideSee PE.L2-3.10.2 in the reference catalog with its NIST cross-references
Official requirement
Protect and monitor the physical facility and support infrastructure for organizational systems.
Assessment objectives
a. the physical facility where organizational systems reside is protected;
b. the support infrastructure for organizational systems is protected;
c. the physical facility where organizational systems reside is monitored; and
d. the support infrastructure for organizational systems is monitored.
Implementation guidance
Editorial examples to help you plan. Adapt them to your environment; the official requirement and objectives remain authoritative.
In plain language
Protect and monitor the physical facility and supporting infrastructure.
Implementation example
Example from the source assessment guide (not a mandatory implementation): You are responsible for protecting your IT facilities. You install video cameras at each entrance and exit, connect them to a video recorder, and show the camera feeds on a display at the reception desk [c,d]. You also make sure there are secure locks on all entrances, exits, and windows to the facilities [a,b].
Evidence examples
Examples suggested by the source guide (not an exhaustive or mandatory checklist): Physical and environmental protection policy; procedures addressing physical access monitoring; system security plan; physical access logs or records; physical access monitoring records; physical access log reviews; other relevant documents or records
Common mistakes
Relying on a locked entrance without appropriate monitoring and supporting protections.