Navigate

CCI-002911

CCI-002911 Definition

Maintain a list of individuals with authorized access to the facility where the system resides.

Status
Type	CheckType.policy

Master Assessment Datasheet

Implementation Guidance

The organization being inspected/assessed maintains a list of individuals currently authorized to access the facility where the information system resides.

Validation Procedures

The organization conducting the inspection/assessment obtains and examines the list of individuals to ensure the organization being inspected/assessed maintains a list of individuals currently authorized to access the facility where the information system resides.

Compelling Evidence

1. List of personnel with authorized facility access

Related Controls

The controls below (if any) were marked by NIST as being related to CCI-002911.

Control	Description
PE-2	The organization: a: Develops, approves, and maintains a list of individuals with authorized access to the facility where the information system resides; b: Issues authorization credentials for facility access; c: Reviews the access list detailing authorized facility access by individuals [one of ]; and d: Removes individuals from the facility access list when access is no longer required.