NIST 800-53 REV 5 • PHYSICAL AND ENVIRONMENTAL PROTECTION
PE-6(3) — Video Surveillance
Employ video surveillance of {{ insert: param, pe-06.03_odp.01 }}; Review video recordings {{ insert: param, pe-06.03_odp.02 }} ; and Retain video recordings for {{ insert: param, pe-06.03_odp.03 }}.
CMMC Practice Mapping
No direct CMMC mapping
NIST 800-171 Mapping
No direct NIST 800-171 mapping
Related Controls
No related controls listed
Supplemental Guidance
Video surveillance focuses on recording activity in specified areas for the purposes of subsequent review, if circumstances so warrant. Video recordings are typically reviewed to detect anomalous events or incidents. Monitoring the surveillance video is not required, although organizations may choose to do so. There may be legal considerations when performing and retaining video surveillance, especially if such surveillance is in a public location.
Practitioner Notes
This enhancement specifically requires video surveillance of designated areas, with regular review of recordings and retention for a defined period. Cameras are your eyes when security personnel are not physically present.
Example 1: Install video surveillance cameras at all building entrances, server room doors, loading docks, and parking areas. Use cameras with night vision capability and sufficient resolution to identify individuals. Store recordings for at least 90 days on a secured NVR or cloud-based storage.
Example 2: Schedule weekly reviews of video footage from high-security areas (server room, executive offices). Use a review checklist to document what was reviewed, the time period covered, and any anomalies found. Retain review logs as evidence for compliance audits.