PE-8 Visitor Access Records

Description

Visitor access records include, for example:

names and organizations of persons visiting,
visitor signatures,
forms of identification,
dates of access,
entry and departure times,
purposes of visits, and
names and organizations of persons visited.

Visitor access records are not required for publicly accessible areas.

Applicability

This Control applies to facilities that house information systems (e.g., data centers, server rooms or closets) considered mission critical and which require a higher level of security due to the nature of one of the following:

type of equipment
type of data the equipment stores

Physical access records shall be reviewed as needed by University Unit Heads or their designees.

Implementation

TAMU-CC maintains visitor access records to the facility where the information system resides (except for those areas within the facility officially designated as publicly accessible). Facility managers shall:

Keep logs for 365 days; and
Review visitor access records Quarterly.

Revision History

Last Updated: February 21, 2025

Previous Versions:

June 29, 2023
May 31, 2022
March 25, 2021
September 16, 2019