We recently had an audit done, and one of the suggestions they had was that we begin logging when people (non-staff) enter and exit the server room(s).
People like ISP employees who need at their equipment, etc.
So I'm wondering, for those doing this already:
- How are you recording it?
- How are you storing said records?
- How long are you keeping the records for?
For the first point they suggested just hanging a clipboard with a sign-in/out sheet for people to sign. Makes sense to me, but I'm wondering if there's other options people have had success with.
For the second and third points, they had no suggestions. :/
Our doors are locked and require IT to let people into the room, so it won't be "self-serve" entry or anything.
Thanks in advance. :)