PE-16 Delivery and Removal
LowModerateHigh
Review PE-16
1. Set its parameters
No parameters to set for PE-16.
2. Record its status
a.Authorize and control [Assignment: organization-defined types of system components] entering and exiting the facility; and
b.Maintain records of the system components.
Discussion
Enforcing authorizations for entry and exit of system components may require restricting access to delivery areas and isolating the areas from the system and media libraries.
ISO/IEC 27001:2022 Crosswalk
A.5.10*A.7.2*A.7.10*
* does not fully satisfy the intent of this control (per NIST's mapping notes).