What is the role of access control in a physical security policy?

• A. Rules for how to file security incidents.
• B. Rules for who may enter and how access is granted, logged, and monitored.
• C. Guidance on maintenance scheduling.
• D. Procedures for emergency medical response.

Answer: (B)

Access control in a physical security policy defines who may enter a facility or area and how access is granted, logged, and monitored. It sets the authorization rules for different zones, specifies the credentials or methods used to prove identity (such as badges, PINs, or biometrics), and describes how those permissions are enforced in practice. It also covers how access is granted or revoked, whether access is time-based or event-based, and how every entry or attempted entry is recorded to create an auditable trail. The goal is to prevent unauthorized access while allowing legitimate operations and providing accountability for entry events. This focus is distinct from other security functions like filing security incidents, scheduling maintenance, or emergency medical response, which are handled in separate policy areas.