Physical and environmental protection policy
procedures addressing visitor access records
visitor access control logs or records
visitor access record or log reviews
system security plan
privacy plan
privacy impact assessment
privacy risk assessment documentation
other relevant documents or records