controlPE-8

Visitor Access Records (PE-8)

Maintain visitor access records to the facility where the system resides for [organization-defined]; Review visitor access records [organization-defined] ; and Report anomalies in visitor access records to [organization-defined].

Security Baselines

LOWMODERATEHIGH

physical-securityenvironmentalfacilities

Why These Connect

Maps To3

These are equivalent or closely aligned requirements in other frameworks.

Baselined In3

This control is included in the linked security baseline (LOW, MODERATE, or HIGH).

Supports7

These related controls work together — a change to one may affect the others.

Enhances3

These enhancements add specific capabilities or refinements to the base control.

Related Controls(4)

PE-2Physical Access Authorizations (PE-2)

LMH

PE-3Physical Access Control (PE-3)

LMH

PE-6Monitoring Physical Access (PE-6)

LMH

RA-3Risk Assessment (RA-3)

LMH

Cross-Framework Mappings(3)

PR.AA-06PR.AA-06Final

NIST OLIR informative reference — Cybersecurity Framework v2.0 to SP 800-53 Rev 5

HIPAAHIPAA Security Rule1 mappingFinal

NIST OLIR informative reference — HIPAA Security Rule to SP 800-53 Rev 5

PR.AA-06PR.AA-06Final

NIST OLIR informative reference — Cybersecurity Framework v2.0 to SP 800-53 Rev 5

Organization-Defined Parameters(3)

Assignmentorganization-defined time period

Assignmentorganization-defined frequency

Assignmentorganization-defined personnel

Control Enhancements(3)

PE-8(1)Automated Records Maintenance and Review (PE-8(1))

PE-8(2)Physical Access Records (PE-8(2))W

PE-8(3)Limit Personally Identifiable Information Elements (PE-8(3))