Control Statement
Facilities housing mission systems, data, or personnel in identified workforce terrain shall be represented on the terrain overlay, with the elements each contains recorded.
Purpose. To resolve the estate to physical locations, so that defense, recovery and continuity can be reasoned about in the place things actually are.
Discussion
The test that makes this control concrete is whether every designated decisive point resolves to a named facility. An agency that cannot say which building its identity provider's hardware sits in cannot defend it physically, cannot plan its rebuild under RC-3, and cannot assess whether the environmental sustain period of that building satisfies the recovery objective of everything depending on it. Cloud-hosted elements resolve to a provider region rather than an agency facility, and recording that distinction is part of the control rather than an exemption from it.
Goals and Metrics
A metric that cannot come out badly is not a metric. Each of these is capable of reporting that the control is not working.
- Percentage of facilities housing mission systems represented on the overlay
- Number of elements with no recorded facility
Accountability
Exactly one role is accountable, and every other role carries at least Informed — no control in the published catalog leaves a role with zero relationship to it. That is a stated property of how these were authored, not a coincidence, and not a claim that every role's work is worth equal attention here.
| AO | CTI | SOC | HUNT | PLAT | ISSO |
|---|---|---|---|---|---|
| Authorizing Official / CISO: Accountable | Cyber Threat Intelligence cell: Informed | SOC / Defensive Operations: Consulted | Hunt team: Informed | Platform and product owners: Responsible | Governance / RMF / ISSO: Consulted |
AO Authorizing Official / CISOCTI Cyber Threat Intelligence cellSOC SOC / Defensive OperationsHUNT Hunt teamPLAT Platform and product ownersISSO Governance / RMF / ISSO
- AccountableAuthorizing Official / CISO
- InformedCyber Threat Intelligence cell
- ConsultedSOC / Defensive Operations
- InformedHunt team
- ResponsiblePlatform and product owners
- ConsultedGovernance / RMF / ISSO
Inputs and Outputs
Consumes
- TM-1 Terrain Inventory and OverlayTerrain overlay elements requiring a physical location
- WF-1 Workforce Terrain IdentificationPersonnel populations requiring facility association
- FO-4 Operational Technology TerrainOperational technology with a physical location
Produces
- FC-2 Physical Zone BoundaryFacilities requiring zone division
- FC-4 Environmental ContinuityFacilities carrying mission services
- TM-3 Asset WeightingPhysical exposure informing asset weighting
Activities
- L2Represent on the terrain overlay every facility housing mission systems, data, or personnel in identified workforce terrain.
- L2Record the elements each facility contains.
- L2Flag mission elements whose facility is unrecorded.
- L3Reconcile the facility set against the agency's real property and lease record, including leased, shared and co-located space.
- L3Resolve every designated decisive point (KT-1) to a named facility or to a recorded provider region, and raise a finding where neither is possible.
- L3Record facilities housing operational technology and building management systems (FO-4), since those are simultaneously facility and OT terrain.
- L3Record the accountable owner for each facility, who is frequently outside the security function and must still be reconciled against TM-7.
- L4Measure the proportion of decisive points resolving to a named location, and trend it.
- L4Test the recorded contents of a sample of facilities against physical verification rather than against the asset record alone.
- L5Feed concentration findings into siting decisions — a facility holding a disproportionate share of decisive points is a single point of failure that the overlay makes visible and that procurement can address.
Measurement
Percentage of decisive points resolving to a named facility or recorded provider region.
Physical verification pass rate on sampled facility contents.
Evidence and Assessment
Terrain overlay showing facilities and their contents; real property reconciliation; decisive-point location resolution record.
Examine the overlay against the real property record; test that decisive points resolve to a named facility; verify a sample of recorded contents physically.
Related Guidance
- PE-2
- PE-3
- PM-8
- ID.AM-01
- PR.IR-02
Position in the Chain
Derived from the other controls’ own declarations, so the two directions cannot disagree.
Where This Control Is Used
Derived, in every case, from the declaration at the other end: the forms whose techniques name this control, the artifacts whose producing and consuming controls include it, the layers whose control lists name it, and the roles its own accountability chart puts to work. Nothing here is authored on this page, so the sheet cannot claim an edge the other end does not.
Forms of Maneuver It Assesses
- M1Screen / GuardGain early warning and buy reaction time before the adversary touches key terrain.1 of 15 techniques — M1.13
- M2Defense in DepthEnsure no single failure is decisive.1 of 18 techniques — M2.17
- M4Obstacle / CanalizationForce the adversary onto ground you own and watch.1 of 17 techniques — M4.15
- M5AmbushTrade space for information and time, and impose cost.1 of 13 techniques — M5.13
Terrain It Is Named On
- T8FacilitiesFacility terrain identification — the control that puts physical space on the overlay.
Artifacts It Stands On
- producesFacility terrain registerWhere elements physically are, which personnel populations are associated with each site, and which facilities carry mission services.
- consumesCyber Terrain OverlayThe positional map of the estate: every element with a defensive layer, a defensive weight, a named accountable owner and its adjacencies. Not an asset inventory — an inventory enumerates, an overlay positions.
- consumesOperational technology terrain registerEngineering and facilities systems as their own defensive layer, with the enterprise-to-operational crossings enumerated as avenues of approach.
- consumesWorkforce terrain registerThe roles whose compromise is equivalent to compromising a decisive point — the operators of decisive points, and the roles with standing access to them.
Roles It Puts to Work
- AccountableAuthorizing Official / CISOIntent, risk acceptance, and the scheme itself.
- ResponsiblePlatform and product ownersTheir own terrain. Obstacles get emplaced on their ground, so they site them.
- ConsultedSOC / Defensive OperationsManeuver. Executes fires and emplaces obstacles inside the standing rules of engagement.
- ConsultedGovernance / RMF / ISSOTranslating cycle outputs into FISMA and RMF artifacts, and owning the rules of engagement.
- InformedCyber Threat Intelligence cellFrame, Map and Fuse. The intelligence requirements, the threat courses of action, and the confidence levels.
- InformedHunt teamCounterattack. Works the hypotheses that Fuse raises.