Control keys, badges, and locks — who has them and getting them back.
What it actually means
Control and manage physical access devices — keys, badges, access cards, locks. Track who has them, collect them when someone leaves, and rekey or deactivate as needed. This is also a Level 1 (FCI) requirement.
Pass or fail — an assessor needs a "yes" to each
- Are physical access devices (keys, badges, cards) controlled and tracked?
- Are they collected or deactivated when someone no longer needs access?
What to have ready
- Inventory of physical access devices and holders
- Procedure for issuing and recovering keys and badges
Where teams trip up
- No idea who holds which keys or badges
- Badges not deactivated after departure
Also a Level 1 (FCI) requirement.
See where this control puts your score
Run all 110 requirements free in about 10 minutes — or draft your SSP language for this control. No signup.
Calculate your SPRS score →Draft your SSP language →