AC.L2-3.4.5[a] — Access RestrictionsAssessment Objective: Physical and logical access to systems is restricted.Implement access controls limiting system access to authorized personnel only.