PE-8 Visitor Access Records
Last Review: 3/6/20
Statement
WTAMU maintains and reviews visitor access records throughout the fiscal year to the facilities where critical information systems reside.
Applicability
This Control applies to all West Texas A&M locations that house information systems (e.g., data centers, server rooms, networking/telecom closets) considered mission critical or require a higher level of security due to the nature of equipment or data the equipment stores.
Implementation
To secure physical access to facilities where information resources reside visitor access shall be properly managed. Management shall include:
- Maintaining visitor access records for at least 6 months
- Logs should include at a minimum visitor name, date, time in, time out and purpose of visit
- Review of visitor access logs regularly
- Reporting of any anomalies to the information security office for incident response capabilities.