SekitCrosswalk
ENES
Start free trial
Sekit CSF · Physical & Environmental · Policy

RCF-0298Facility access control

Physical access to company facilities and restricted areas is formally governed and restricted to authorised personnel

Mapping at a glance
RCF-0298Facility access controlPhysical & Environmental · Policy
A.7.1Physical security perimetersISO/IEC 27001:2022 · Annex A controlsA.7.2Physical entryISO/IEC 27001:2022 · Annex A controlsPR.AA-05Access permissions managedNIST CSF 2.0PR.IR-02Assets protected from environmental threatsNIST CSF 2.0

RCF-0298 maps to 4 controls across the published frameworks. Open in the full graph →

Maps to ISO/IEC 27001:2022 · Annex A controls

Curated mapping with the reasoning, not just the codes.

A.7.1Physical security perimeterssupportsThis policy control defines in writing who may enter company premises and restricted areas such as the server room and who approves that access, one part of the perimeter definition A.7.1 requires alongside physical barriers.A.7.2Physical entrysupportsThis policy control sets out in writing who may enter restricted areas, the entry authorization A.7.2 requires before any access mechanism is issued.

Maps to NIST CSF 2.0

Curated mapping with the reasoning, not just the codes.

PR.AA-05Access permissions managedPR.IR-02Assets protected from environmental threats

Evidence that proves this control

What an auditor, or Sekit's evidence engine, asks for.

Physical access and visitor controls
How access to the premises and restricted areas is controlled (cards, keys, register), and how visitors are handled.
From the Sekit evidence catalog

This topic through the other lenses

RCF-0299 ProcessRCF-0300 Technical

All Physical & Environmental controls

Physical & Environmental
Ask Sekura: “What evidence proves RCF-0298?”
Connect your AI · free MCP
https://sekit.ai/api/mcp/crosswalk
  1. In Claude or ChatGPT, add a custom connector and paste this URL.
  2. Sign in with your email to finish. Free, read-only, no organization required.