During a physical security audit, an IS auditor was provided a proximity badge that granted...

The proximity badge incorrectly granting access to restricted areas is the most concerning issue, as it indicates a failure of the access control system to enforce the principle of least privilege and protect the sensitive or critical assets of the organization. The proximity badge should only grant access to the areas that are necessary for the IS auditor to perform the audit fieldwork, and not to any other areas that may contain confidential information, valuable equipment, or hazardous materials. The incorrect access could result in unauthorized disclosure, modification, or destruction of the assets, as well as potential safety or legal issues.

References

ISACA CISA Review Manual, 27th Edition, page 254

Office and Workplace Physical Security Assessment Checklist

Physical Security: Planning, Measures and Examples