NIST Cybersecurity Framework 2.0
PR.AA-06

Physical access to assets is managed, monitored, and enforced commensurate with risk

Parent: PR.AA

Description

No description available.

Mapped SPARTA techniques

1 techniques

  • Supported by two independent derivations that agree, neither of them SafeMode's invention. Through NIST 800-53: SafeMode's curated mapping records IA-0012 against PE-3 Physical Access Control, and CSF 2.0's own crosswalk names that control as an informative reference for PR.AA-06. Through SPARTA: SPARTA's catalog maps IA-0012 to countermeasure CM0005 Ground-based Countermeasures; CM0037 Disable Physical Ports; CM0052 Insider Threat Protection, and that countermeasure's own CSF references include PR.AA-06. Recorded as `addresses` rather than `mitigates` because a CSF subcategory states an outcome to be achieved while the underlying control states the mechanism that achieves it, which is the mechanism-versus-mandate ceiling in decisions entry 15.

Cross-framework references

Relationships published by the source frameworks themselves, reproduced here with attribution. They are not SafeMode Space mappings and carry no confidence rating of ours.

Cite as SafeMode Space, csf-2-0 PR.AA-06.

Built 2026-07-25 from 216 techniques, 334 regulation articles, 125 ENISA controls, 2,610 framework controls, and 90 countermeasures.