3.10.5[a]

Requirement Discussion

Physical access devices include keys, locks, combinations, and card readers.

NIST 800-171A Assessment Guidance

Examine

[SELECT FROM: Physical and environmental protection policy; procedures addressing physical access control; security plan; physical access control logs or records; inventory records of physical access control devices; system entry and exit points; records of key and lock combination changes; storage locations for physical access control devices; physical access control devices; list of security safeguards controlling access to designated publicly accessible areas within facility; other relevant documents or records].
Interview

[SELECT FROM: Personnel with physical access control responsibilities; personnel with information security responsibilities].
Test

[SELECT FROM: Organizational processes for physical access control; mechanisms supporting or implementing physical access control; physical access control devices].

ID	Related Determination Statements
3.10.5[b]	Physical access devices are controlled.
3.10.5[c]	Physical access devices are managed.

Our CMMC Overview Course simplifies CMMC. Enroll so you can make informed decisions!