C5 (Germany)
C5: Physical Security

C5 (Germany) C5-PS-03: Perimeter Protection

Build the outer shell of cloud service buildings to physically resist and detect intrusion, with external doors, windows, walls and locking mechanisms that withstand a burglary attempt for at least ten minutes.

Maintained by Gerard BlokdykVerified against the published standard Control text last updated

What else in your programme already covers this

This control maps to 27 controls across 16 other frameworks. If you already hold one of them, the evidence you collected for it is the starting point here rather than new work.

FedRAMP High · 3 controls

  • PE-3 Physical Access Control
  • PE-6 Monitoring Physical Access
  • PE-6(1) Monitoring Physical Access | Intrusion Alarms and Surveillance Equipment (PE-6(1))

FedRAMP Moderate · 3 controls

  • PE-3 Physical Access Control
  • PE-6 Monitoring Physical Access
  • PE-6(1) Monitoring Physical Access | Intrusion Alarms and Surveillance Equipment (PE-6(1))

PCI DSS 4.0 · 3 controls

  • 9.2.1 9.2.1 Facility entry controls for CDE systems
  • 9.2.2 9.2.2 Controls on publicly accessible network jacks
  • 9.3.2 9.3.2 Visitor access procedures for the CDE

CMMC 2.0 · 2 controls

HIPAA Security Rule · 2 controls

ISO 27001:2022 · 2 controls

  • 7.1 Physical security perimeters
  • 7.4 Physical security monitoring

ISO 27002:2022 · 2 controls

  • 7.1 Physical security perimeters
  • 7.4 Physical security monitoring

NIST SP 800-66 Rev 2 · 2 controls

  • ANSSI-HYG-26 Control and Protect Access to Server Rooms and Technical Areas

ISO 27701:2019 · 1 control

  • NIST-CSF-PR.AA-06 Physical access to assets is managed, monitored, and enforced commensurate with risk

SOC 2 · 1 control

  • SOC2-CC6.4 CC6.4 Restricting physical access to facilities and assets

Every mapping shown was judged rather than inferred from wording similarity, and the ones that failed review are published too. See the coverage reports and what was rejected.

Other controls in C5: Physical Security

You are reading one control. How much of C5 (Germany) have you already done?

C5 (Germany) C5-PS-03 is one control. If you already hold one of the frameworks below, a reviewed crosswalk already says how much of C5 (Germany) your existing evidence covers. Hold Cloud Security Alliance Cloud Controls Matrix (CCM) v4.0.1 and 95 of 121 C5 (Germany) controls already carry evidence.

Each report names every control your existing framework evidences, every one it does not, the reasoning behind each claim, and the claims that were argued against and rejected. 0 were rejected on the Cloud Security Alliance Cloud Controls Matrix (CCM) v4.0.1 pair alone.

Query this from an agent

The graph holds this control, the 27 it maps to, and the evidence behind each claim, over MCP and REST.