03.10.07 Physical Access Control

This policy establishes procedures for controlling physical access to facilities, systems, and Controlled Unclassified Information (CUI) to protect against unauthorized disclosure, use, disruption, modification, or destruction.

• A.03.10.07.a.01: physical access authorizations are enforced at entry and exit points to the facility where the system resides by verifying individual physical access authorizations before granting access.
• A.03.10.07.a.02: physical access authorizations are enforced at entry and exit points to the facility where the system resides by controlling ingress and egress with physical access control systems, devices, or guards.
• A.03.10.07.b: physical access audit logs for entry or exit points are maintained.
• A.03.10.07.c[01]: visitors are escorted.
• A.03.10.07.c[02]: visitor activity is controlled.
• A.03.10.07.d: keys, combinations, and other physical access devices are secured.
• A.03.10.07.e: physical access to output devices is controlled to prevent unauthorized individuals from obtaining access to CUI.