Canada ITSP.10.033 Security and Privacy Controls and Assurance Activities Catalogue PE-03: PE-03 Physical access control

The organisation enforces physical access authorizations at defined entry and exit points by verifying authorization and controlling ingress and egress with access control systems or guards, keeps physical access audit logs, controls publicly accessible areas, escorts and controls visitors, secures keys, cards, combinations and other access devices, inventories them at a set frequency, and changes combinations and keys at a set frequency and when lost, compromised or when holders leave. Canada-specific addition: access card identifiers are removed from the access database at a set frequency when a card is lost, stolen or its holder leaves. The GC discussion describes security inspections by authorized personnel with increased frequency under heightened threat. 9 enhancements, including the Canada-specific (400) Security inspections.