PE-2(2)—Physical Access Authorizations

Operational

>Control Description

PHYSICAL ACCESS AUTHORIZATIONS | TWO FORMS OF IDENTIFICATION The organization requires two forms of identification from ⚙organization-defined list of acceptable forms of identification for visitor access to the facility where the information system resides.

>Supplemental Guidance

Acceptable forms of government photo identification include, for example, passports, Personal Identity Verification (PIV) cards, and drivers’ licenses. In the case of gaining access to facilities using automated mechanisms, organizations may use PIV cards, key cards, Personal Identification Number (PIN), and biometrics. Related controls: IA-2, IA-4, IA-5.

Ask AI

Configure your API key to use AI features.