PR.AC-4: Identity Management, Authentication and Access Control
Access permissions and authorizations are managed, incorporating the principles of least privilege and separation of duties.
PR.AC-2: Identity Management, Authentication and Access Control
Physical access to assets is managed and protected.