Control and manage physical access devices.

A physical access device is something that grants access to a physical location. This can include a traditional key or a key card. Limiting who you provide physical access devices to is critical for controlling access to your facilities.

Only provide physical access devices to persons that need permanent or extended access to your facilities. Physical access devices include keys, key cards, and pin codes. When a person with physical access to your facilities no longer needs access (e.g. they get fired) you need to take possession of their keys and smart cards. If they accessed your facilities using a pin code change the pin codes. Maintain a list of keys and cards used to access your facilities.