164.310(a)(1) Facility Access Controls (Standard)
Physical safeguard · Standard
The requirement as we hold it
Facility Access Controls (Standard). Implement policies limiting physical access to electronic information systems and facilities while ensuring properly authorized access is allowed. NIST recommends layered physical security and visitor management.
The examiner asks
- Show me the policies that limit physical access to systems and facilities while allowing authorised access.
- Who can enter, and where is that recorded?
Evidence to bring
- the facility access policy
- the authorised-entrant list
Source: 164.310(a)(1) at eCFR. Our statement of the clause, not the instrument verbatim.