This objective requires your organization to identify the records you use to track physical access to areas or systems that store, process, or transmit Controlled Unclassified Information (CUI). This includes logs from badge readers, sign-in sheets, visitor logs, or any mechanism that documents who accessed what and when.
