CCI-002911

The organization maintains a list of individuals with authorized access to the facility where the information system resides.

Implementation Guidance

The organization being inspected/assessed maintains a list of individuals currently authorized to access the facility where the information system resides.

Validation Procedures

The organization conducting the inspection/assessment obtains and examines the list of individuals to ensure the organization being inspected/assessed maintains a list of individuals currently authorized to access the facility where the information system resides.

Compelling Evidence

1. List of personnel with authorized facility access

The controls below (if any) were marked by NIST as being related to CCI-002911.