Besides prevent, detect and respond what are the additional requirements of the Secured Area access control system?

• A. Allow, Deny, Differentiate; Electronic or other record of entry (stop list); Limit access to only those necessary
• B. Allow, Deny, Differentiate; Electronic or other record of entry (stop list); Limit access to only those necessary; Ensure access authority is in writing; Change lock combos if compromised
• C. Monitor only during business hours
• D. Print daily reports for management

Answer: (B)

The key idea here is that securing a Secured Area isn’t just about preventing intrusions, detecting them, or responding to incidents; it also requires formal control and contingency measures to maintain ongoing security. In addition to the standard access rules and a record of entries (such as a stop list), two critical requirements are that access authority be in writing and that lock combinations be changed if there is a compromise. Written authority creates an auditable, accountable chain of who is permitted to access the area, reducing ambiguity and ensuring approvals are documented. Changing lock combinations when a compromise is suspected or confirmed prevents former or compromised individuals from gaining entry, restoring the integrity of the physical barriers. Other options may cover logging or monitoring aspects but miss one of these essential controls.