PR.AA-06 addresses the management and monitoring of physical access to assets, using controls like security guards, cameras, and locked entries to restrict entry based on risk levels. High-risk areas receive enhanced protections, while guests or vendors are escorted to limit exposure. It prevents unauthorized physical interactions that could compromise systems or data.

This subcategory aligns physical security with cybersecurity goals, ensuring that facilities housing critical assets are safeguarded against tampering or theft. Continuous monitoring detects anomalies, enabling rapid response to breaches. PR.AA-06 complements logical access controls with robust physical defenses.