Physical access requests are reviewed and approved by the asset owner
Context and Guidance: A procedure exists by which asset owners, custodians, or authorised delegates review and approve requests for assets that they are responsible for. Asset owners and custodians should be aware of which identities require access to their assets and be able to validate the requirement with respect to business and cybersecurity requirements before granting approval.
Related Practices • Input From: Implementing ARCHITECTURE-3a provides input that may be useful for implementing this practice. • Progression: This practice is part of a practice progression. Practice progressions are groups of related practices that represent increasingly complete or more advanced implementations of an activity. The practices in this progression include: ACCESS-3a, ACCESS-3d, ACCESS-3e, ACCESS-3f, ACCESS-3g.