Logical vs Physical Access: What Is Being Protected?
Ask whether the person is trying to access a physical space or a digital resource.
Physical access
Controls entry into physical locations or assets through mechanisms such as locks, badges, guards, mantraps, and physical biometric controls.
Logical access
Controls access to systems, applications, networks, databases, and files through passwords, MFA, role-based access, and permissions.
Least privilege
Users should receive only the access needed to perform their responsibilities.
Privileged access
Administrator accounts require stronger controls because compromise can have widespread consequences.
Periodic review
Organizations should revisit access after role changes, terminations, inactivity, and other changes.
The takeaway
Physical access controls spaces. Logical access controls digital resources.
Related Summit guides
FAQ
Is MFA a logical access control?
Yes.
Is a building badge physical access?
Yes.
Why review permissions periodically?
Responsibilities and employment status change.