Place access-control components away from hazards and public reach

Bottom line: a locked controller cabinet can still be poorly placed. Water piping, public ceilings, vehicle impact, heat, dust, shared tenant space, or an accessible disconnect can defeat availability or allow tampering before a door alarm is ever generated.

Source fact: NIST addresses component location as a protection decision

PE-18 in NIST SP 800-53 Release 5.2.0 calls for positioning system components within a facility to minimize potential damage from physical and environmental hazards and to minimize opportunities for unauthorized access. The control is broad enough to include computing and supporting components, not merely user workstations.

Applied to PACS, placement affects both security and continuity. A controller above a publicly accessible ceiling, below a leak source, or beside an unprotected power cutoff can convert a local condition into multiple uncontrolled doors.

Source boundary and applicability

NIST SP 800-53 is a control catalog. Whether PE-18 is mandatory, selected, tailored, or used as guidance depends on the organization’s authorization framework, contract, regulation, and system boundary. It does not provide a universal mounting location, enclosure rating, flood elevation, fire requirement, or code approval. Qualified design disciplines and local requirements remain necessary.

Applicability questions

• Which doors and functions fail if this panel, power supply, switch, or interface is damaged?
• Can the public, tenants, vendors, or unescorted staff reach the equipment or its cables?
• Are water, condensation, temperature, dust, vibration, impact, or electromagnetic hazards present?
• Is service access safe, observable, and possible without defeating another control?
• Do enclosure, battery, ventilation, fire, and accessibility requirements constrain relocation?

DSE recommendation: add placement risk to panel acceptance

The following steps are DSE recommendations based on the cited source.

Create an inventory with component location, controlled doors, power and network dependencies, enclosure, access population, environmental conditions, nearby utilities, and failure consequence. Inspect above and below the equipment, trace accessible cable and disconnect paths, and consider credible maintenance and building events. Rank deficiencies by the number and importance of affected openings.

Use relocation, rated enclosure, barriers, leak protection, protected power, tamper monitoring, or procedural control only after responsible facilities, security, electrical, fire, and accessibility owners approve the design. Do not place batteries or energized equipment in a sealed or unlisted arrangement.

Verification and evidence

Retain the component inventory, sanitized plans, photographs, environmental and access observations, manufacturer installation requirements, approved risk treatment, change ticket, tamper and power-loss tests, and inspection cadence. Reassess after renovations, tenant changes, utility work, leaks, impacts, or repeated faults.

Official references

• NIST SP 800-53 Release 5.2.0, PE-18 — Location of System Components – National Institute of Standards and Technology; released August 27, 2025