Requirement
"Security measures for working in secure areas shall be designed and implemented."[1]
Explanation
Secure areas are where the organization stores and handles sensitive information. Access to these areas must be restricted to authorized personnel.