Physical Access Control

class

Operational

family

Physical and Environmental Protection

number

PE-3

priority

P1

impact

LOW_MODERATE_HIGH

The organization: Enforces physical access authorizations for all physical access points (including designated entry/exit points) to the facility where the information system resides (excluding those areas within the facility officially designated as publicly accessible); Verifies individual access authorizations before granting access to the facility; Controls entry to the facility containing the information system using physical access devices and/or guards; Controls access to areas officially designated as publicly accessible in accordance with the organizations assessment of risk; Secures keys, combinations, and other physical access devices; Inventories physical access devices [ Assignment: organization-defined frequency ]; and Changes combinations and keys [ Assignment: organization-defined frequency ] and when keys are lost, combinations are compromised, or individuals are transferred or terminated.

Comments