# HIPAA 164.310(a)(1)

URL: /systems/trust-and-governance/criteria/hipaa/164-310-a-1 · Id: `criterion:hipaa:164.310(a)(1)`

> Physical access to electronic information systems and the facilities that house them is limited to authorized access.

Physical access to electronic information systems and the facilities that house them is limited to authorized access.

| Property | Value |
| --- | --- |
| Framework | HIPAA |
| Reference | `164.310(a)(1)` |
| Satisfied by | [Upstream review](/systems/trust-and-governance/controls/upstream-review) |