Facility Security
What is Facility Security?
Comprehensive physical security measures for organizational facilities including access controls, surveillance, environmental protection, and visitor management.
Terms that appear alongside facility security
Each of these is named in at least one of the same controls as facility security. The number is how many controls name both.
- security plan 7 shared controls
- access control 5 shared controls
- cybersecurity 5 shared controls
- nist 4 shared controls
- compliance 2 shared controls
- security clearance 2 shared controls
- personnel security 2 shared controls
- itar 2 shared controls
Frameworks that govern facility security
What the standards actually require on facility security
Requirements naming facility security across 6 standards, quoted from the control text.
The owner or operator must define the security organisation and support each person with security duties, designate in writing a Facility Security Officer who holds a TWIC, can be reached at any time and has the required knowledge (the FSO may cover several fa...
us-maritime-transportation-security-act-mtsa-and-uscg-cybersecurity-requirements::S-105.200 · Organise facility security and designate a qualified Facility Security Officer →Implement policies to safeguard facility and equipment from unauthorized physical access, tampering, and theft. NIST recommends documented zones, controls, and inspection regime.
164.310(a)(2)(ii) · Facility Security Plan (Addressable) →Implement policies to safeguard facility and equipment from unauthorized physical access, tampering, and theft. NIST recommends documented zones, controls, and inspection regime.
164.310(a)(2)(ii) · Facility Security Plan (Addressable) →Requirement 0190 (Part Six: Physical, section 23.1.1 Physical Security Lifecycle; applies to All entities; dated 31 October 2024; retained from Release 2025): A facility security plan is developed for new facilities, facilities under construction or major refu...
protective-security-policy-framework-pspf-release-2026::0190 · 0190 Facility security plan for new, under-construction or refurbished facilities →Requests to export defense articles or technical data classified by the U.S. or a foreign government must go to DDTC on Form DSP-85 with full details, the facility security clearance codes of U.S.
itar-international-traffic-in-arms-regulations::125.3 and 125.7 · Export classified technical data and articles only with DSP-85 approval and NISPOM compliance →Implement HIPAA Security Rule Physical Safeguards per 45 CFR 164.310. Facility Access Controls per 45 CFR 164.310(a): Contingency Operations + Facility Security Plan + Access Control and Validation Procedures + Maintenance Records (all Addressable).
NISTSP66-5 · Physical Safeguards: Facility Access, Workstation Use and Security, Device and Media Controls →Questions people ask about facility security
What is Facility Security?
Why is Facility Security important for compliance?
Which compliance frameworks address Facility Security?
Where can I learn more about Facility Security?
See how Facility Security applies across compliance frameworks
Our platform maps 1,016 frameworks with 316K cross-framework control mappings. Explore how this concept is addressed across standards.