Physical access controls define who is allowed physical access to facilities that house information systems, and to the information systems within those facilities and/or the display mechanisms associated with those information systems. Without physical access controls, the potential exists for information systems to be illicitly accessed and the security of the housed information could be compromised.

This Physical Access Policy Template includes the following sections:

• Default policy statements that define what the enterprise must do.
• Default procedures that define how the enterprise must do it.
• Baseline recommendations to customize the template to individual enterprise requirements.

Use this and the related templates to build an efficient and effective enterprise Security Policy.