An organization's information systems are a mix of Windows and UNIX systems located in a single computer room. Access to the computer room is restricted by the use of door locks that require proximity

Managerial controls are policies, procedures, and guidelines that dictate how security is managed, not physical access restrictions.

System specific controls are unique to a particular information system or its components, whereas this control applies broadly to the entire physical environment.

Technical controls are implemented through technology (hardware, software, or firmware) within the information system itself, such as firewalls or encryption, not the physical access to the room containing the systems.

The access control for the computer room (proximity cards, PINs, restricted access) is a physical security control that protects all hardware systems located within that room. This control is provided by the facility or organization and 'inherited' by all systems operating within it, meaning the individual systems don't implement or manage this control themselves; they benefit from it being centrally provided.