Which action best supports compliance with facility security and access control?

• A. Install more decorative signage
• B. Implement a comprehensive key and access control program
• C. Increase building size to reduce congestion
• D. Hire additional contractors for non-security tasks

Answer: (B)

Controlling who can enter a facility and when is the heartbeat of security and access control. The best choice is to implement a comprehensive key and access control program because it creates and enforces who holds keys or credentials, what doors or areas they can reach, and during which times access is allowed. It also establishes a formal process for issuing, renewing, revoking, and tracking keys and access cards, so you can quickly respond when someone leaves the organization or a credential is lost. This creates an auditable record, supports accountability, and helps enforce the principle of least privilege, reducing the chance of unauthorized entry or misuse of access.

Decorative signage doesn’t actually restrict entry or manage privileges. Increasing building size won’t address the underlying control of who can access what, and could complicate security rather than improve it. Hiring contractors for non-security tasks may introduce new risks if they’re not tightly managed, and it doesn’t establish proper access controls for sensitive areas.