CCI-000914

Review the access list detailing authorized facility access by individuals in accordance with organization-defined frequency.

Implementation Guidance

The organization being inspected/assessed will review the access list and authorization credentials every 90 days and document these review and approval actions as an audit trail. DoD has defined the frequency as every 90 days.

Validation Procedures

The organization conducting the inspection/assessment obtains and examines the audit records of the review actions to ensure that reviews are conducted every 90 days. DoD has defined the frequency as every 90 days.

Compelling Evidence

1.) Building access list review log

The controls below (if any) were marked by NIST as being related to CCI-000914.