PE.L1-3.10.5—Manage Physical Access
>Control Description
Control and manage physical access devices.
>Cross-Framework Mappings
>Assessment Interview Topics
Questions assessors commonly ask
Process & Governance:
- •What is your policy for managing physical access control devices (badges, keys, etc.)?
- •How do you track issuance and return of physical access devices?
- •What is your process for handling lost or stolen access devices?
- •Who is responsible for maintaining physical access control systems?
- •How often do you inventory physical access devices?
Technical Implementation:
- •What systems manage badges, keys, and access cards?
- •What inventory tracks physical access devices?
- •What technologies deactivate lost or stolen badges?
- •What tools track badge issuance and return?
- •What systems remotely disable access devices?
Evidence & Documentation:
- •What physical security policies and procedures can you provide?
- •What physical access logs demonstrate access control?
- •What visitor logs show visitor escort and monitoring?
- •What badge issuance records track physical access devices?
- •What surveillance footage or monitoring logs can you show?
- •What evidence shows physical security controls are functioning?
- •What alternate work site approval documentation can you provide?
Ask AI
Configure your API key to use AI features.