164.310(a)(2)(iii) Access Control and Validation Procedures (Addressable)
Physical safeguard · Addressable
The requirement as we hold it
Access Control and Validation Procedures (Addressable). Implement procedures to control and validate access to facilities based on role or function, including visitor control and access to software programs for testing and revision.
The examiner asks
- Show me how you control and validate facility access by role or function, including visitors.
- Where is the visitor control and the test-and-revision access recorded?
Evidence to bring
- the validation procedure
- the visitor log
Source: 164.310(a)(2)(iii) at eCFR. Our statement of the clause, not the instrument verbatim.