What type of records support verification of SCI access changes?

• A. Security camera footage only
• B. Access logs and periodic reviews
• C. Only annual checklists
• D. No logs

Answer: (B)

Tracking who has SCI access and when those access changes occur requires records that document both the events and the authorization decisions. Access logs provide a factual trail of who accessed secure areas or systems and when, giving you concrete evidence of changes in privileges. Periodic reviews then verify that those privileges remain appropriate over time, ensuring that any grant, modification, or revocation was correctly authorized and implemented.

Relying on security camera footage alone doesn’t establish formal access changes or the authorization decisions behind them, so it isn’t sufficient for verification. Solely using annual checklists misses intermediate changes and may allow improper access to go unnoticed. No logs at all means there’s no auditable history to confirm who had access and when changes occurred.

Therefore, combining access logs with periodic reviews offers verifiable, auditable evidence of SCI access changes and helps maintain proper need-to-know and authorization controls.