DE.CM-02 - Watching the Physical Environment for Threats

DE.CM-02 involves monitoring the physical environment housing technology assets to detect adverse events, such as unauthorized access or tampering with controls like locks and alarms. This includes reviewing logs from badge readers and visitor records for unusual patterns, supplemented by tools like cameras and security guards. It protects the physical layer of cybersecurity.

This subcategory ensures that physical breaches, which could enable logical attacks, are identified quickly, aligning monitoring with risk levels for critical areas. It supports a holistic security approach by integrating physical oversight with digital defenses. DE.CM-02 safeguards assets from tangible threats that could compromise operations.