Maintain a log of who physically accessed your facility.
What it actually means
Maintain audit logs of physical access — a record of who entered controlled areas and when. A visitor log plus badge or entry records satisfies this. This is also a Level 1 (FCI) requirement.
Pass or fail — an assessor needs a "yes" to each
- Do you maintain audit logs of physical access to controlled areas?
What to have ready
- Physical access logs (visitor logs, badge or entry records)
- Retention period for those logs
Where teams trip up
- No record of facility access
- Logs kept sporadically or discarded immediately
Also a Level 1 (FCI) requirement.
See where this control puts your score
Run all 110 requirements free in about 10 minutes — or draft your SSP language for this control. No signup.
Calculate your SPRS score →Draft your SSP language →