# Contractors Assess Access Control Logging

A discussion about Access Control Revision 3 examines whether facilities handling controlled unclassified information (CUI) need identity-attributable records of egress and how to maintain those records without compromising fire and life-safety operation. Participants disagree on whether video surveillance can satisfy logging expectations and whether employees should badge out; the discussion does not establish an authoritative interpretation. For contractors and facility operators, the issue affects selection and operation of access-control hardware for locations such as IT rooms and roll-up doors, including where forklift workflows make routine badge-out impractical.

- Contractors should validate the applicable control interpretation with the relevant assessor and reconcile it with fire-code and life-safety requirements before selecting hardware or procedures.
- Video may help reconstruct events, but a commenter questions whether it provides an identity-attributable, reviewable access record; procurement teams should distinguish incident-support capabilities from access logging needs.
- Facility operators should account for specific door types and operational workflows, including forklift use, when evaluating access-control approaches.

**Jurisdictions:** federal
**Industries:** Information Technology, Defense & Military
**Topics:** Cybersecurity, Regulatory Compliance
**Published:** October 16, 2026

### Government Entities
- National Institute of Standards and Technology (NIST)

### Key Quotes
> A video camera doesn’t meet the logging threshold (not attributable to an identity, not reviewable as a record), but they are super helpful for piecing together actions in an incident.
> — Commenter

> We have a forklift and we don't want the driver stopping with a load to get off walk up to a reader to open the door and we also do not use auto-closing doors so how do you close it remotely?
> — Original poster

### Sources
- [Access Control Rev. 2 to Rev. 3 requirements and how to meet them question...](https://www.reddit.com/r/CMMC/comments/1x7kl33/access_control_rev_2_to_rev_3_requirements_and) - reddit-cmmc