PE.L2-3.10.4  

Reference: CMMC 2.11

Family: PE

Level Introduced: 2

Title: Physical Access Logs [CUI Data]

Practice:
Maintain audit logs of physical access.

CMMC Clarification:
Make sure you have a record of who is accessing both your facility (e.g., office, plant, factory) and your equipment. You can do this in writing by having employees and visitors sign in and sign out as they enter and leave your physical space, and by keeping a record of who is coming and going from the facility.

Example
You and your coworkers like to have friends and family join you for lunch at the office on Fridays. Your small company is growing, and sometimes it's hard to know who is coming and going from the lunch area. You work with your boss, the company founder, and ask all non-employees to sign in at the reception area, then sign out when they leave. Employees can have badges or key cards that enable tracking and logging access to the company facilities.

Source: CMMC v2.0