PE-8.3: Limit Personally Identifiable Information Elements

Physical and environmental protection policy

personally identifiable information processing policy

privacy risk assessment documentation

privacy impact assessment

visitor access records

personally identifiable information inventory

system security plan

privacy plan

other relevant documents or records

Organizational personnel with visitor access records responsibilities

organizational personnel with information security and privacy responsibilities

Organizational processes for maintaining and reviewing visitor access records