Physical access requirements incorporate the principle of least privilege
Context and Guidance: The principle of least privilege should be incorporated whenever possible when determining physical access requirements to avoid or reduce the potential impact of errors or malicious activities. For example, the person requesting access to a facility should only be granted access to the areas needed to perform assigned responsibilities.
Related Practices • Input From: Implementing ARCHITECTURE-3a provides input that may be useful for implementing this practice. • Progression: This practice is part of a practice progression. Practice progressions are groups of related practices that represent increasingly complete or more advanced implementations of an activity. The practices in this progression include: ACCESS-3a, ACCESS-3d, ACCESS-3e, ACCESS-3f, ACCESS-3g.