. . "Access to facilities and systems is controlled wherever sensitive data is processed. ??? The State Agency must ensure that reports and removable storage media containing match results will be labeled with ???For Official Use Only.??? ??? The State Agency must ensure that locks and other protective measures are used on doors and windows to prevent unauthorized access to computer and support areas." . .