C5 (Germany) C5-PS-01: Physical Security and Environmental Control Requirements

What else in your programme already covers this

This control maps to 45 controls across 22 other frameworks. If you already hold one of them, the evidence you collected for it is the starting point here rather than new work.

ISO 27001:2022 · 4 controls

7.1 Physical security perimeters
7.3 Securing offices, rooms and facilities
7.5 Protecting against physical and environmental threats
7.8 Equipment siting and protection

ISO 27002:2022 · 4 controls

7.1 Physical security perimeters
7.3 Securing offices, rooms and facilities
7.5 Protecting against physical and environmental threats
7.8 Equipment siting and protection

Cloud Security Alliance Cloud Controls Matrix (CCM) v4.0.1 · 3 controls

CCM-DCS-03 Secure Area Policy and Procedures
CCM-DCS-12 Cabling Security
CCM-DCS-15 Equipment Location

FedRAMP High · 3 controls

PE-1 Policy and Procedures
PE-15 Water Damage Protection (PE-15)
PE-3 Physical Access Control

FedRAMP Moderate · 3 controls

PE-1 Policy and Procedures
PE-15 Water Damage Protection (PE-15)
PE-3 Physical Access Control

HIPAA Security Rule · 3 controls

164.310(a)(1) Facility Access Controls (Standard)
164.310(a)(2)(i) Contingency Operations (Addressable)
164.310(a)(2)(ii) Facility Security Plan (Addressable)

NIST SP 800-53 Rev 5 · 3 controls

NIST800-PE-1 PE-1 Policy and Procedures
NIST800-PE-15 PE-15 Water Damage Protection
NIST800-PE-3 PE-3 Physical Access Control

NIST SP 800-66 Rev 2 · 3 controls

164.310(a)(1) Facility Access Controls (Standard)
164.310(a)(2)(i) Contingency Operations (Addressable)
164.310(a)(2)(ii) Facility Security Plan (Addressable)

APEC Cross-Border Privacy Rules (CBPR) System · 2 controls

CBPR-06 Security Safeguards
CBPR-PR-27 Physical, technical and administrative safeguards

NIST Cybersecurity Framework 2.0 · 2 controls

NIST-CSF-PR.AA-06 Physical access to assets is managed, monitored, and enforced commensurate with risk
NIST-CSF-PR.IR-02 The organization's technology assets are protected from environmental threats

NIST SP 800-171 Rev 3 · 2 controls

03.10.01 Physical Access Authorizations
03.10.08 Access Control for Transmission

PCI DSS 4.0 · 2 controls

9.1.1 9.1.1 Requirement 9 policies and procedures maintained
9.2.1 9.2.1 Facility entry controls for CDE systems

SOC 2 · 2 controls

SOC2-A1.2 A1.2 Environmental protection, backup and recovery infrastructure
SOC2-CC6.4 CC6.4 Restricting physical access to facilities and assets

ANSSI Guide d'hygiene informatique (42 mesures, v2.0) · 1 control

ANSSI-HYG-26 Control and Protect Access to Server Rooms and Technical Areas

APPI · 1 control

APPI-A23 Security Control Measures

Australian Privacy Principles (APPs) · 1 control

APP-11 APP 11 - Security of personal information

CFTC System Safeguards (17 CFR 37, 38, 39, 49) · 1 control

CFTC-SS-6 Physical Security and Environmental Controls Category

CMMC 2.0 · 1 control

PE.L2-3.10.1 Limit Physical Access

DORA · 1 control

DORA-Art.9 Protection and prevention

NIS2 Directive · 1 control

Art.21.1 Take proportionate all-hazards measures calibrated to the entity's own risk exposure

NIST SP 800-161 Rev 1 · 1 control

161R1-PE-1 Policy and Procedures

Every mapping shown was judged rather than inferred from wording similarity, and the ones that failed review are published too. See the coverage reports and what was rejected.

You are reading one control. How much of C5 (Germany) have you already done?

C5 (Germany) C5-PS-01 is one control. If you already hold one of the frameworks below, a reviewed crosswalk already says how much of C5 (Germany) your existing evidence covers. Hold Cloud Security Alliance Cloud Controls Matrix (CCM) v4.0.1 and 95 of 121 C5 (Germany) controls already carry evidence.

If you hold Cloud Security Alliance Cloud Controls Matrix (CCM) v4.0.178.5% covered · 26 gaps If you hold NIST SP 800-53 Rev 572.7% covered · 33 gaps If you hold FedRAMP Moderate71.1% covered · 35 gaps If you hold ISO 27002:202267.8% covered · 39 gaps If you hold ISO 27001:202257% covered · 52 gaps If you hold NIST SP 800-171 Rev 350.4% covered · 60 gaps

Each report names every control your existing framework evidences, every one it does not, the reasoning behind each claim, and the claims that were argued against and rejected. 0 were rejected on the Cloud Security Alliance Cloud Controls Matrix (CCM) v4.0.1 pair alone.

See the released pairs, $299 each Browse the graph free