How does physical security relate to the Protect function?
- A.Locked server racks (with keycard logging), motion-triggered cameras, and a visitor sign-in process protect the network closet from tampering
- B.Rotating cryptographic keys (on a fixed schedule), auditing key custodians, and revoking unused keys protect data confidentiality across storage
- C.Physical security controls (locks, cameras, access badges, environmental controls) protect hardware, facilities, and physical assets from unauthorized access, theft, and environmental damage
- D.Segmenting the guest network (from production VLANs), rate-limiting bandwidth, and disabling peer discovery protect internal systems from guest traffic
Why C is correct
Physical security protects the tangible assets that host data and systems. Without physical protection, technical controls can be bypassed through physical access.
Know someone studying for NIST CSF? Send them this one.