---

id: "PE-02(02)" title: "Two Forms of Identification" family: "PE" family_name: "Physical and Environmental Protection" sort_id: "pe-02.02" priority: "P2" implementation_level: "organization" parent: "PE-02" enhancement: True

---

Statement

Require two forms of identification from the following forms of identification for visitor access to the facility where the system resides: {{ insert: param, pe-02.02_odp }}.

Guidance

Acceptable forms of identification include passports, REAL ID-compliant drivers’ licenses, and Personal Identity Verification (PIV) cards. For gaining access to facilities using automated mechanisms, organizations may use PIV cards, key cards, PINs, and biometrics.

Assessment Objective

two forms of identification are required from {{ insert: param, pe-02.02_odp }} for visitor access to the facility where the system resides.

Physical and environmental protection policy

procedures addressing physical access authorizations

list of acceptable forms of identification for visitor access to the facility where the system resides

access authorization forms

access credentials

physical access control logs or records

system security plan

other relevant documents or records

Organizational personnel with physical access authorization responsibilities

organizational personnel with physical access to the system facility

organizational personnel with information security responsibilities

Organizational processes for physical access authorizations

mechanisms supporting and/or implementing physical access authorizations