Enforce physical access authorisations by verifying individual authorisation before granting facility access and controlling ingress with agency procedures and controls, keep physical access audit logs for the physically secure location and designated sensitive areas, control non-public areas with keys, locks, combinations, biometric or card readers or placards, escort visitors and control their activity in physically secure locations, secure keys and combinations, inventory agency-issued access devices annually, and change combinations and keys on loss, compromise, transfer or termination; where these conditions cannot be met, PE-17 applies.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.