Physical access to company facilities and restricted areas is formally governed and restricted to authorised personnel
This policy control defines in writing who may enter company premises and restricted areas such as the server room and who approves that access, one part of the perimeter definition A.7.1 requires alongside physical barriers.
This policy control sets out in writing who may enter restricted areas, the entry authorization A.7.2 requires before any access mechanism is issued.