CCI-000947

Maintain visitor access records to the facility where the system resides for an organization-defined time period.

Implementation Guidance

The organization being inspected/assessed must maintain visitor access records for their facilities for at least one year. DoD has defined the time period as at least one year.

Validation Procedures

The organization conducting the inspection/assessment obtains and examines visitor access records to determine if the organization is maintaining visitor access records to the facility where the information system resides for at least one year. DoD has defined the time period as at least one year.

Compelling Evidence

1.) Facility access control policy and procedures

The controls below (if any) were marked by NIST as being related to CCI-000947.