All aspects of business operation require an access review

Key elements to include in an access control policy:

• Building access, including specific areas like warehousing, shipping docks, utility rooms for electrical panels, parking lots, etc.
• Computer, communications and other digital infrastructures.
• Data on databases, servers, individual workstations, laptops, etc.
• Business processes.
• Physical safety of personnel in case of an emergency, like a natural or man-made disaster.
• Regulatory and legal compliance standards.