Logical access - restricts physical access

The entity restricts physical access to facilities and protected information assets.

Trust Service Criterion

CC

Audit period

type-2

Points of focus

• Facilities use badge or equivalent access controls
• Visitor access is authorized and logged
• Physical access is reviewed periodically