PR.AC-2

Physical access to assets is managed and protected

Protect · Access Control

Manual Attestation

Compliance Score

95%

Compliant

Documentation Maturity

4/ 5

Target: 2.5

Implementation Maturity

4/ 5

Target: 2.5

Control Description

Physical access to IT equipment, server rooms, and network infrastructure is controlled through locks, badges, or other mechanisms.

Remediation Guidance

Secure server rooms with key card access. Maintain visitor logs. Restrict access to network closets and equipment. Review physical access rights when personnel changes occur.