CMMC Practice PE.L1-3.10.5 – Manage Physical Access: Control and manage physical access devices.
Links to Publicly Available Resources
Discussion [NIST SP 800-171 R2]
Physical access devices include keys, locks, combinations, and card readers.
Identifying and controlling physical access devices (e.g., locks, badges, key cards) is just as important as monitoring and limiting who is able to physically access certain equipment. Physical access devices are only strong protection if you know who has them and what access they allow. Physical access devices can be managed using manual or automatic processes such a list of who is assigned what key, or updating the badge access system as personnel change roles.