National Vulnerability Database

National Vulnerability Database

National Vulnerability
Database

NIST Special Publication 800-53 (Rev. 4)

Security and Privacy Controls for Federal Information Systems and Organizations

PE-8 VISITOR ACCESS RECORDS

Family:
PE - PHYSICAL AND ENVIRONMENTAL PROTECTION
Class:
Priority:
P3 - Implement P3 security controls after implementation of P1 and P2 controls.
Baseline Allocation:
Low Moderate High
PE-8 PE-8 PE-8 (1)

Control Description

The organization:

a. Maintains visitor access records to the facility where the information system resides for [Assignment: organization-defined time period]; and

b. Reviews visitor access records [Assignment: organization-defined frequency].

Supplemental Guidance

Visitor access records include, for example, names and organizations of persons visiting, visitor signatures, forms of identification, dates of access, entry and departure times, purposes of visits, and names and organizations of persons visited. Visitor access records are not required for publicly accessible areas.

Related to:

Control Enhancements

PE-8(1) VISITOR ACCESS RECORDS | AUTOMATED RECORDS MAINTENANCE / REVIEW
The organization employs automated mechanisms to facilitate the maintenance and review of visitor access records.
PE-8(2) VISITOR ACCESS RECORDS | PHYSICAL ACCESS RECORDS
[Withdrawn: Incorporated into PE-2].

References

None.