Control and manage physical access devices.

A physical access device is something that grants access to a physical location. This can include a traditional key, an RFID card, or a pin code. Limiting who you provide physical access devices to is critical for controlling access to your facilities.

Only provide physical access devices to persons that need permanent or extended access to your facilities. Physical access devices include keys to doors, smart cards, and pin codes. When a person with physical access to your facilities no longer needs access (e.g. they get fired) you need to take possession of their keys and smart cards. If they accessed your facilities using a pin code change the pin codes. Changing locks that are opened with a traditional key is also a good idea as keys can easily be copied.