Facility Access Control
- Physical access to facilities, equipment, and operating environments is limited to authorized individuals using badges, card readers, and electronic locks under the physical security policy.
- Access is logged, periodically reviewed, and promptly revoked when no longer required.
- Sensitive areas such as server and computer rooms are restricted to authorized personnel.
Framework Alignment: NIST CSF PR.AA; CMMC Level 1 (PE); GDPR Art. 32; ISO 27001:2022 A.7.1, A.7.2
