Which action is essential to restrict access to a security container?

• A. Rotating the combination annually
• B. Controlling and Managing the Combination to the Security Container
• C. Logging every entry
• D. Replacing the container's lock every year

Answer: (B)

The essential step to restrict access to a security container is controlling and managing the combination. The combination acts as the gatekeeper for who can open the container, so accurately authorizing who possesses it, securely distributing it, and promptly updating or revoking access when people change roles or leave ensures that only approved individuals can gain entry. Without tight management of who has the code, any other controls lose effectiveness.

Auditing, like logging every entry, is important for detecting misuse, but it doesn’t actively prevent access. Rotating the combination annually helps limit exposure, yet it can still be mismanaged if the new code isn’t tightly controlled. Replacing the lock each year is costly and unnecessary if access is properly controlled through responsible distribution and revocation processes.