NIST 800-53 r5 · Controls catalogue · Family PE
PE-16Delivery and Removal
Authorize and control {{ insert: param, pe-16_prm_1 }} entering and exiting the facility; and Maintain records of the system components.
Last updated: 22 August 2026 07:11 UTC
Implementations targeting this control (0)
- No implementations targeting this control yet.
ATT&CK techniques this control mitigates (0)
- No ATT&CK techniques mapped to this control yet.
Weaknesses this control addresses (5)AI-assisted
CWEs ranked by how often they appear in real CVEs. The rationale describes how this control reduces exploitability of each weakness class.
| CWE | Name | CVEs | Why this control addresses it |
|---|---|---|---|
CWE-284 | Improper Access Control | 6,900+ | Enforces physical access controls on deliveries and removals to prevent unauthorized access to the facility and system components. |
CWE-269 | Improper Privilege Management | 3,400+ | Manages physical access privileges by restricting who can deliver or remove system components. |
CWE-732 | Incorrect Permission Assignment for Critical Resource | 1,900+ | Ensures correct permission assignments for critical physical resources during delivery and removal processes. |
CWE-285 | Improper Authorization | 1,500+ | Requires explicit authorization for items and components entering or leaving the facility. |
CWE-1263 | Improper Physical Access Control | 13 | Directly implements authorization and control of physical items entering and exiting the facility to prevent improper physical access. |
Top CVEs where this control is the strongest mitigation
| CVE | Risk | CVSS | EPSS | Match |
|---|---|---|---|---|
| No CVEs annotated to this control yet — the per-CVE backfill is in progress. | ||||