Skip to content

Physical Access Log

What is Physical Access Log?

A record of all entries to and exits from physically secured areas, used for security monitoring, investigation, and compliance.

Information Security

What the standards actually require on physical access log

Requirements naming physical access log across 6 standards, quoted from the control text.

Logs of physical access are kept, at least in an ad hoc way, manually such as a paper register or automatically through an access control system.

australian-energy-sector-cyber-security-framework-aescsf::ACCESS-3c · ACCESS-3c: Physical access logs kept →
CMMC 2.01 control

Maintain audit logs recording physical access to facilities holding organizational systems.

PE.L2-3.10.4 · Physical Access Logs →

CMMC 2.0 Level 1 (Foundational) practice PE.L1-3.10.4: Physical Access Logs - safeguarding Federal Contract Information per FAR 52.204-21(b)(1)(ix) (3.10.4).

PE.L1-3.10.4 · Physical Access Logs →
NERC CIP1 control

Retain physical access logs of entry of individuals with authorized unescorted physical access into each PSP for at least ninety calendar days.

nerc-cip::CIP-006 R1.9 · CIP-006-6 R1.9: Retain physical access logs for 90 days →
API 11641 control

The plan must require a formal physical security plan that sets processes grounded in risk, plus operational and procedural controls, over physical access at every site holding IAC cyber assets, aligned to the risk of the highest-profile segregated environment...

api-1164::PR.AC-2 · PR.AC-2 A physical security plan for sites with IAC cyber assets, aligned to the highest profile present →

The organisation monitors physical access to the facility to detect and respond to physical security incidents, reviews physical access logs at a set frequency and when defined events occur, and coordinates the results with the incident response capability.

canada-itsp-10-033-security-and-privacy-controls-and-assurance-activities-catalogue::PE-06 · PE-06 Monitoring physical access →

Questions people ask about physical access log

What is Physical Access Log?
A record of all entries to and exits from physically secured areas, used for security monitoring, investigation, and compliance.
Why is Physical Access Log important for compliance?
Physical Access Log is a key concept in Information Security. Understanding physical access log helps organizations meet regulatory requirements, reduce risk, and demonstrate due diligence during audits. Our compliance platform maps 1,016 frameworks with 316K cross-framework control mappings.
Which compliance frameworks address Physical Access Log?
Physical Access Log appears in the requirement text of Australian Energy Sector Cyber Security Framework (AESCSF), CMMC 2.0, CMMC 2.0 Level 1, NERC CIP, API 1164. Across these standards we have identified 6 controls that name it directly, each linked to the control text on the compliance platform.
Where can I learn more about Physical Access Log?
Explore our compliance framework pages to see how physical access log applies across different standards and regulations. Our implementation guides provide step-by-step guidance, and the compliance platform offers AI-powered analysis of how this concept maps across 1,016 frameworks.

See how Physical Access Log applies across compliance frameworks

Our platform maps 1,016 frameworks with 316K cross-framework control mappings. Explore how this concept is addressed across standards.

Written and maintained by Gerard Blokdyk, The Art of Service.