PE-2—Physical Access Authorizations

Develop, approve, and maintain a list of individuals with authorized access to the facility where the system resides;

Issue authorization credentials for facility access;

Review the access list detailing authorized facility access by individuals ⚙organization-defined frequency; and

Remove individuals from the facility access list when access is no longer required.