The organization requires two forms of identification from [organization-defined list of acceptable forms of identification] for visitor access to the facility where the information system resides.
Supplemental
Acceptable forms of government photo identification include, for example, passports, Personal Identity Verification (PIV) cards, and drivers’ licenses. In the case of gaining access to facilities using automated mechanisms, organizations may use PIV cards, key cards, PINs, and biometrics.