PE-2: Physical Access Authorizations
From NIST's SP800-53:
a. Develop, approve, and maintain a list of individuals with authorized access to the facility where the system resides; b. Issue authorization credentials for facility access; c. Review the access list detailing authorized facility access by individuals [Assignment: organization-defined frequency]; and d. Remove individuals from the facility access list when access is no longer required.
Cyber Threat Graph Context
Explore how this control relates to the wider threat graph