{"catalogRevision":"24028ffcfc2b295fa1b08ee6caa84b765f0731b321496bf4f548c49ad2177028","kind":"record","record":{"attributes":{"category":"physical","domain":"Physical & Environmental Security","type":"preventive"},"canonicalUrl":"https://controlsmap.com/?v=1&node=uc%3AUC-PHYS-11","description":"Determine which alternate work sites are permitted and define the security controls required when personnel work from them, including physical protection of equipment and information. Assess the effectiveness of those controls and provide workers a means to report security incidents and problems from alternate sites.","details":{"control_category":"physical","control_type":"preventive","domain":"Physical & Environmental Security","guidance":[],"members":[{"control_id":"PE-17","coverage":"full","framework":"nist-800-53","relationship":"equal"}],"statement":"Determine which alternate work sites are permitted and define the security controls required when personnel work from them, including physical protection of equipment and information. Assess the effectiveness of those controls and provide workers a means to report security incidents and problems from alternate sites.","title":"Secure alternate work sites","unified_id":"UC-PHYS-11"},"id":"uc:UC-PHYS-11","mapUrl":"https://controlsmap.com/?v=1&node=uc%3AUC-PHYS-11","sourceIds":["nist-800-53"],"sourceUrl":null,"title":"UC-PHYS-11 — Secure alternate work sites","type":"unified"},"relationships":[{"expectedCatalogRevision":"24028ffcfc2b295fa1b08ee6caa84b765f0731b321496bf4f548c49ad2177028","id":"rel:270eca224019349774b8308b7156310049169a051491b352d3a28ba8bfb1b98c","properties":{"rationale":"Defining security controls for alternate-site work reduces shoulder-surfing and observation in public/remote settings.","strength":"related"},"sourceDetailPath":"/data/v1/records/uc-uc-phys-11-d74b621d.json","sourceId":"uc:UC-PHYS-11","targetDetailPath":"/data/v1/records/risk-phys-remote-spying-shoulder-surfing-3b0c78f1.json","targetId":"risk:phys-remote-spying-shoulder-surfing","type":"mitigates"},{"expectedCatalogRevision":"24028ffcfc2b295fa1b08ee6caa84b765f0731b321496bf4f548c49ad2177028","id":"rel:4472a46e9c3fb9d0f2cf431ccec26fd34cca854cc501e3d5749c8f76f6d512cd","properties":{},"sourceDetailPath":"/data/v1/records/wf-c7-acbef2ee.json","sourceId":"wf:C7","targetDetailPath":"/data/v1/records/uc-uc-phys-11-d74b621d.json","targetId":"uc:UC-PHYS-11","type":"oversees"},{"expectedCatalogRevision":"24028ffcfc2b295fa1b08ee6caa84b765f0731b321496bf4f548c49ad2177028","id":"rel:4ab425eb8f8c5b8825ede8a443d8ee5ac9cfa4225928b7c34152635d6d1678b4","properties":{},"sourceDetailPath":"/data/v1/records/wf-c34-d94fc91f.json","sourceId":"wf:C34","targetDetailPath":"/data/v1/records/uc-uc-phys-11-d74b621d.json","targetId":"uc:UC-PHYS-11","type":"operates"},{"expectedCatalogRevision":"24028ffcfc2b295fa1b08ee6caa84b765f0731b321496bf4f548c49ad2177028","id":"rel:975c8085aaa0f65297b5dd6c1b764a7495f0784b30c77c68a649c13744f54e57","properties":{},"sourceDetailPath":"/data/v1/records/wf-c9-75fb1752.json","sourceId":"wf:C9","targetDetailPath":"/data/v1/records/uc-uc-phys-11-d74b621d.json","targetId":"uc:UC-PHYS-11","type":"tests"},{"expectedCatalogRevision":"24028ffcfc2b295fa1b08ee6caa84b765f0731b321496bf4f548c49ad2177028","id":"rel:e15563e8ddc3fba74fd85156119de71d014733f9ce2499897b3ed9f9b19ec872","properties":{"rationale":"Requiring physical protection of equipment and information at alternate work sites directly reduces theft of devices used outside the perimeter.","strength":"primary"},"sourceDetailPath":"/data/v1/records/uc-uc-phys-11-d74b621d.json","sourceId":"uc:UC-PHYS-11","targetDetailPath":"/data/v1/records/risk-phys-theft-of-equipment-media-c64433e7.json","targetId":"risk:phys-theft-of-equipment-media","type":"mitigates"},{"expectedCatalogRevision":"24028ffcfc2b295fa1b08ee6caa84b765f0731b321496bf4f548c49ad2177028","id":"rel:e6c56b94d3bae4857f8bf89a9707c959c822ea9c1df51534780aa56213d6fc30","properties":{"rationale":"Extending physical protection requirements to alternate sites limits unauthorized access to equipment and information there.","strength":"related"},"sourceDetailPath":"/data/v1/records/uc-uc-phys-11-d74b621d.json","sourceId":"uc:UC-PHYS-11","targetDetailPath":"/data/v1/records/risk-phys-inadequate-facility-access-a83f3330.json","targetId":"risk:phys-inadequate-facility-access","type":"mitigates"},{"expectedCatalogRevision":"24028ffcfc2b295fa1b08ee6caa84b765f0731b321496bf4f548c49ad2177028","id":"rel:f726ca1a6d748ccbf965b3781ed45a8168ffbc5b92b14f23ecde4ce70d43d5e4","properties":{"control_id":"PE-17","coverage":"full","delta":null,"framework":"nist-800-53","provenance":{"defaultConfidence":"medium","defaultStatus":"active","direction":"canonical_to_source","mapper":"coworkcanvas-compliance-graph","note":"Each member is a documented relationship claim from the canonical unified control to a source control or guidance proposition. relationship: equal|superset_of (full) / intersects_with|subset_of (partial) / informs (guidance). confidence 'medium' = single-mapper, documented, not yet externally corroborated. source_version is the member framework's edition from the standard version register.","reviewDate":"2026-09-07"},"relationship":"equal","source_version":"Rev. 5"},"sourceDetailPath":"/data/v1/records/uc-uc-phys-11-d74b621d.json","sourceId":"uc:UC-PHYS-11","targetDetailPath":"/data/v1/records/ctrl-nist-800-53-pe-17-62e61eb4.json","targetId":"ctrl:nist-800-53:PE-17","type":"maps_to"}],"schemaVersion":1}
