← SOC 2 Trust Services Criteria in plain English

CC6.4 CC6

Logical and Physical Access Controls / CC6.4

Restricting physical access to facilities and equipment

Think of it likeThe server cupboard has a lock, and not everyone has the code.

In plain English

Physical access to data centres, offices and other sensitive areas is restricted to authorized people, with entry recorded and reviewed.

Related CSF, CIS and ISO controls (unofficial mapping)

ID.AM-01PR.AA-06PR.IR-021.1A.7.1A.7.2A.7.3A.7.4A.7.5A.7.8