Control Description Data Protection Classification
Level 1 Level 2 Level 3 Level 4
PP-1 Limit physical access to organizational systems, equipment, and the respective operating environments to authorized individuals. recommended required essential essential
PP-5 Control and manage physical access devices. required required essential essential
PP-6 Enforce safeguarding measures for the University’s data at alternate work sites. optional recommended essential essential