03.10.01 Physical Access Authorizations

This policy establishes procedures for managing physical access to the facility where the system resides, ensuring that only authorized personnel have access to the facility and system resources. This policy applies to all personnel, contractors, and visitors who require access to the facility.

• A.03.10.01.ODP[01]: the frequency at which to review the access list detailing authorized facility access by individuals is defined.
• A.03.10.01.a[01]: a list of individuals with authorized access to the facility where the system resides is developed.
• A.03.10.01.a[02]: a list of individuals with authorized access to the facility where the system resides is approved.
• A.03.10.01.a[03]: a list of individuals with authorized access to the facility where the system resides is maintained.
• A.03.10.01.b: authorization credentials for facility access are issued.
• A.03.10.01.c: the facility access list is reviewed <A.03.10.01.ODP[01]: frequency>.
• A.03.10.01.d: individuals from the facility access list are removed when access is no longer required.