164.310(a)(2)(iv): Maintenance Records
Implement policies and procedures to document repairs and modifications to the physical components of a facility which are related to security.
164.310(a)(2)(iii): Access Control and Validation Procedures
Implement procedures to control and validate a person's access to facilities based on their role or function, including visitor control and control of access to software programs for testing and revision.