02 — Capability · BC-840.20
Access Control & Credentialing
Let the right people into the right spaces at the right times and no one else, and know afterward who went where.
- Badge Access
- Visitor Management
- Key Control
In scope
- Credential issue and revocation
- Access zones and permission assignment
- Visitor and contractor registration
- Key and lock control
Out of scope
- Logical identity and system access (see BC-760)
- Onboarding and offboarding as an HR process (see BC-360)
Decomposes into · 4
- BC-840.20.10Credential LifecycleIssue, change and revoke badges and credentials as people join, move and leave, with revocation on the day it is due rather than the week after.
- BC-840.20.20Access Zoning & PermissionsDivide sites into zones by sensitivity and assign access by role, with periodic review of who still holds what.
- BC-840.20.30Visitor & Contractor ManagementRegister, screen, escort and track visitors and contractors so no one is on site without a host who knows they are there.
- BC-840.20.40Key & Lock ControlAccount for every physical key and lock, including who holds the key and what happens when one goes missing.