Control 3.10.3

★What This Means in Plain English

All visitors to areas containing CUI systems must be escorted by authorized personnel at all times. Visitor activity should be monitored and logged, and visitors should never be left unattended near CUI systems.

✓How Petronella Implements This Control

Petronella Technology Group implements this control through:

• Mandatory escort policy for all visitors to IT and CUI processing areas
• Visitor log capturing name, organization, purpose, escort, entry/exit times
• Visitor badges that visibly distinguish visitors from employees
• Security cameras recording visitor activity in restricted areas
• ComplianceArmor visitor management module tracking all visitor access

🔎Assessment Guidance

Assessors will review the visitor escort policy, check visitor logs for completeness, verify that visitor badges are used, test that visitors cannot access restricted areas without escort, and confirm security camera coverage of visitor areas.

⚠Common Implementation Gaps

• No visitor escort policy or requirement
• Visitors left unattended in areas with CUI systems
• Visitor log incomplete or not maintained
• No visitor badges to distinguish visitors from employees
• No camera coverage of visitor activity

⇄Cross-Framework Mapping