This functional area addresses the specific security levels and layers required with evaluation of access control procedures and products.  Access and security measures may include physical barriers, technology, policy, and procedures to ensure an integrated and effective system. Vulnerability, threat, and risk assessments often are conducted to determine the required level of individual access and facility security—as well as the type of systems to be implemented.