PE-8(1)

Requirement

Maintain and review visitor access records using [Assignment: organization-defined automated mechanisms].

Discussion

Visitor access records may be stored and maintained in a database management system that is accessible by organizational personnel. Automated access to such records facilitates record reviews on a regular basis to determine if access authorizations are current and still required to support organizational mission and business functions.

NIST 800-53A Assessment Guidance

Examine

[SELECT FROM: Physical and environmental protection policy; procedures addressing visitor access records; automated mechanisms supporting management of visitor access records; visitor access control logs or records; system security plan; privacy plan; other relevant documents or records].

Interview

[SELECT FROM: Organizational personnel with visitor access record responsibilities; organizational personnel with information security and privacy responsibilities].

Test

[SELECT FROM: Organizational processes for maintaining and reviewing visitor access records; automated mechanisms supporting and/or implementing the maintenance and review of visitor access records].

ID	Assessment Objectives
PE-08(01)[01]	visitor access records are maintained using <PE-08(01)_ODP[01] automated mechanisms>;
PE-08(01)[02]	visitor access records are reviewed using <PE-08(01)_ODP[02] automated mechanisms>.

Our CMMC Overview Course simplifies CMMC. Enroll so you can make informed decisions!