How should access for onsite personnel to sensitive areas be controlled?

• A. All onsite personnel automatically gain access
• B. Only supervisors are restricted; others unrestricted
• C. Access must be authorized and based on individual job function; termination revokes access; all physical access mechanisms are returned or disabled
• D. Access is granted temporarily without review

Answer: (C)

Access to sensitive areas must be controlled through formal authorization tied to an individual’s job function, with access granted on a need-to-know basis and revoked when the person’s role changes or they leave. In practice this means issuing or disabling physical access credentials (badges, keys, etc.) as part of a lifecycle process—when someone is terminated or transfers to a role that no longer requires entry, their access is promptly revoked and any credentials are returned or deactivated.

This approach is the best because it directly enforces least privilege for physical security and ensures accountability. It prevents former or unauthorized personnel from entering sensitive spaces and reduces the risk of accidental or intentional misuse of access. It also aligns with PCI DSS requirements that govern physical access to the cardholder data environment, emphasizing controlled, role-based access and timely revocation.

Other options fail to provide proper control: granting automatic access to everyone is too permissive and dangerous; restricting access only to supervisors ignores the real needs of staff who may require entry; granting temporary access without proper review creates gaps in accountability and can leave access active longer than intended.