Physical controls need to be tested as part of reviewing workstations to ensure that the hardware is protected against theft or unauthorized access. Testing for physical controls includes verifying secure access, proper location, and locking mechanisms which are critical to safeguarding the physical IT infrastructure.