PE.L1-3.10.4—Physical Access Logs
>Control Description
Maintain audit logs of physical access.
>Cross-Framework Mappings
>Assessment Interview Topics
Questions assessors commonly ask
Process & Governance:
- •What is your policy for logging physical access?
- •How long do you retain physical access logs?
- •Who reviews physical access logs and how often?
- •What is your process for investigating physical access anomalies?
- •How do you protect physical access logs from unauthorized access or modification?
Technical Implementation:
- •What systems log physical access events?
- •How are physical access logs centrally collected?
- •What physical access control systems generate audit logs?
- •How long are physical access logs retained?
- •What tools analyze physical access logs?
Evidence & Documentation:
- •What physical security policies and procedures can you provide?
- •What physical access logs demonstrate access control?
- •What visitor logs show visitor escort and monitoring?
- •What badge issuance records track physical access devices?
- •What surveillance footage or monitoring logs can you show?
- •What evidence shows physical security controls are functioning?
- •What alternate work site approval documentation can you provide?
Ask AI
Configure your API key to use AI features.