This control requires your organization to control, monitor, and manage the physical access control devices (e.g., keycards, fobs, keys, biometric readers) used to restrict entry to areas where Controlled Unclassified Information (CUI) is stored or processed.