Browse ISC2 Certification Guides

Physical Access Controls

May 24, 2026

Study ISC2 CC physical access controls: badges, gates, guards, CCTV, alarms, logs, facilities, and authorized personnel.

On this page

Physical access controls protect people, facilities, systems, and media. CC questions often ask whether the control prevents entry, detects activity, or supports investigation.

Common controls

Control Main purpose
Badge system identify and authorize entry
Gate or turnstile restrict physical entry
Security guard deter, verify, escort, and respond
CCTV monitor and support investigation
Alarm detect and notify
Visitor log record access and accountability
Environmental controls protect availability of equipment and facilities

Authorized versus unauthorized personnel

The exam cares about who should be present, who approved access, and what evidence proves it. A visitor may be allowed in a lobby but not a data center. A contractor may have temporary access that must expire.

Facility scenario traps

  • A camera may detect, but it does not physically block entry.
  • A badge grants entry only if issued, reviewed, and revoked correctly.
  • Tailgating is an access-control failure even if the door has a lock.
  • Physical access to servers can bypass many logical controls.
Revised on Monday, June 15, 2026
Logical Access