HOME

PE-8

PE-8 H M L
Description

The organization:
a. Maintains visitor access records to the facility where the information system resides for [Assignment: organization-defined time period]; and
b. Reviews visitor access records [Assignment: organization-defined frequency].

FedRAMP
  • H PE-8 (a) [for a minimum of one (1) year] PE-8 (b) [at least monthly]
  • M PE-8 (a) [for a minimum of one (1) year] PE-8 (b) [at least monthly]
  • L PE-8 (a) [for a minimum of one (1) year] PE-8 (b) [at least monthly]
DISA Cloud Computing SRG

a. at least one year
b. every 30 days

Source:
DoD RMF TAG

Supplemental Guidance

Visitor access records include, for example, names and organizations of persons visiting, visitor signatures, forms of identification, dates of access, entry and departure times, purposes of visits, and names and organizations of persons visited. Visitor access records are not required for publicly accessible areas.

References: None.