Who is required to establish and maintain perimeter controls?

• A. Contractors who are authorized to store classified information
• B. All employees
• C. Visitors
• D. Security guards only

Answer: (A)

Perimeter controls are the physical security measures that prevent unauthorized access to areas where classified information is stored. The responsibility to establish and maintain these controls rests with the organization that is authorized to store classified information—typically the contractor managing the facility. They design and implement entry points, screening procedures, access badges, alarms, and monitoring, and keep them current as part of their security program. While all employees and visitors must comply with these controls, and security guards enforce them, the duty to set them up lies with the organization that handles the classified material. That’s why contractors authorized to store classified information are the correct answer.