---

id: "PE-08(01)" title: "Automated Records Maintenance and Review" family: "PE" family_name: "Physical and Environmental Protection" sort_id: "pe-08.01" priority: "P2" implementation_level: "organization" parent: "PE-08" enhancement: True

---

Statement

Maintain and review visitor access records using {{ insert: param, pe-8.1_prm_1 }}.

Guidance

Visitor access records may be stored and maintained in a database management system that is accessible by organizational personnel. Automated access to such records facilitates record reviews on a regular basis to determine if access authorizations are current and still required to support organizational mission and business functions.

Assessment Objective: visitor access records are maintained using {{ insert: param, pe-08.01_odp.01 }};

Assessment Objective: visitor access records are reviewed using {{ insert: param, pe-08.01_odp.02 }}.

Physical and environmental protection policy

procedures addressing visitor access records

automated mechanisms supporting management of visitor access records

visitor access control logs or records

system security plan

privacy plan

other relevant documents or records

Organizational personnel with visitor access record responsibilities

organizational personnel with information security and privacy responsibilities

Organizational processes for maintaining and reviewing visitor access records

automated mechanisms supporting and/or implementing the maintenance and review of visitor access records