PE-3: Physical Access Control

Statement

• a.

  Enforce physical access authorizations at entry and exit points by:

  • 1.

    Verifying individual access authorizations before granting access to the facility; and

  • 2.

    Controlling ingress and egress to the facility using pe-03_odp.02 ;

• b.

  Maintain physical access audit logs for entry or exit points ;

• c.

  Control access to areas within the facility designated as publicly accessible by implementing the following controls: physical access controls ;

• d.

  Escort visitors and control visitor activity circumstances ;

• e.

  Secure keys, combinations, and other physical access devices;

• f.

  Inventory physical access devices every frequency ; and

• g.

  Change combinations and keys organization-defined frequency and/or when keys are lost, combinations are compromised, or when individuals possessing the keys or combinations are transferred or terminated.