CCI-002910

The organization approves a list of individuals with authorized access to the facility where the information system resides.

Implementation Guidance

The organization being inspected/assessed formally approves a list of individuals currently authorized to access the facility where the information system resides.

Validation Procedures

The organization conducting the inspection/assessment obtains and examines the list of individuals currently authorized to access the facility where the information system resides and ensures it is formally approved.

Compelling Evidence

1.) Sample of approved facility requests 2.) List of authorized personnel

The controls below (if any) were marked by NIST as being related to CCI-002910.