← Back to catalog
PE-8(3)
Limit Personally Identifiable Information Elements
Physical and Environmental Protection (PE)
Baselines
Low · Not includedModerate · Not includedHigh · Not included
Description
Limit personally identifiable information contained in visitor access records to the following elements identified in the privacy risk assessment: [assignment].
Discussion
Organizations may have requirements that specify the contents of visitor access records. Limiting personally identifiable information in visitor access records when such information is not needed for operational purposes helps reduce the level of privacy risk created by a system.
Implementation guidance
No content available.
CSF 2.0 crosswalk
No CSF mappings exist for this control.