CCI-002918

Defines entry and exit points to the facility where the system resides that require physical access audit logs be maintained.

Implementation Guidance

The organization being inspected/assessed defines and documents entry/exit points that require physical access audit logs be maintained. DoD has determined the entry/exit points are not appropriate to define at the Enterprise level.

Validation Procedures

The organization conducting the inspection/assessment obtains and examines the documented entry/exit points to ensure the organization being inspected/assessed defines entry/exit points that require physical access audit logs be maintained. DoD has determined the entry/exit points are not appropriate to define at the Enterprise level.

Compelling Evidence

1.) Physical access logs 2.) Visitor logs

The controls below (if any) were marked by NIST as being related to CCI-002918.