Requirement
"Secure areas shall be protected by appropriate entry controls and access points."[1]
Explanation
Restrict access to the facility using traditional key locks rfid card or pass code locks. Only provide authorized personnel with physical access devices.