CMMC Level 2 &
DFARS Physical Security
Direct Control Alignment
Our platform is architected to satisfy the specific Physical Protection (PE) requirements of NIST SP 800-171.
Limit physical access to organizational information systems, equipment, and the respective operating environments to authorized individuals.
SecurePoint USA supports ID-verified check-in, escort workflows, zone approvals, and physical-access audit evidence.
Escort visitors and monitor visitor activity.
Automated host notifications and digital visitor badges clearly state escort requirements and restricted zones based on screening results.
Maintain audit logs of physical access.
Every visitor check-in, host approval, and FSO decision is captured in an immutable, append-only vault with 10-year audit log retention. ID image retention is configurable by policy and plan.
Control and manage physical access devices.
Track visitor badge issuance and return with precise timestamps, ensuring all physical access tokens are accounted for in the audit trail.
Assessment-Grade
Evidence Packs
Satisfy assessors with cryptographically signed audit summaries. One-click exports for every visitor access event during your assessment window.
Immutable Logs
Append-only records with SHA-256 verification ensure data integrity.
Designed for assessor review
Evidence packs structured for CMMC and DFARS assessment workflows.
Evidence Summary
ID: EVIDENCE-2024-Q2
Hardened cloud infrastructure
Visitor metadata runs on hardened cloud infrastructure with tenant isolation, role-based access, and immutable audit logging.
Encrypted at rest and in transit
Visitor records are encrypted at rest and in transit, with site-scoped access controls and configurable retention.
Audit Trail Integrity
Digital signatures prevent any manipulation of access records, providing the "defensibility" auditors require.
Automate Your Assessment Prep
Phase 1: Control Alignment
Map your specific site policies to PE requirements in our rules engine.
Phase 2: Data Orchestration
Unified screening and ID verification automatically creates the evidence trail.
Phase 3: Immutable Archive
Logs are vaulted with cryptographic hashes for external audit validation.
The Standard for
Audit Readiness
Stop manually collecting paper logs. Join the facilities using SecurePoint USA to automate the physical security of their CUI.