AP7.4.5. Access to records and information concerning encoded ID
data and PINs shall be restricted. Access to identification or authorizing
data, operating system software or any identifying data associated with the
entry control system shall be limited to the fewest number of personnel as
possible. Such data or software shall be kept secure when unattended.