Physical access controls (such as fences, locks, and signage) are implemented, at least in an ad hoc manner
Context and Guidance: For the purpose of the model, these controls are intended for the protection of IT, OT, and information assets (for example, locks that control entry to a data center). Additionally, it is important to consider that the effectiveness of some types of physical access controls, such as keys and badges, may be significantly impacted by the way in which they are managed and secured.
Related Practices • Input From: Implementing ARCHITECTURE-3a provides input that may be useful for implementing this practice. • Progression: This practice is part of a practice progression. Practice progressions are groups of related practices that represent increasingly complete or more advanced implementations of an activity. The practices in this progression include: ACCESS-3a, ACCESS-3d, ACCESS-3e, ACCESS-3f, ACCESS-3g.