AP7.4.6. Records shall be maintained reflecting active
assignment of ID badge/card, PIN, level of access, and similar system-related
records. Records concerning personnel removed from the system shall be
retained for 90 days. Records of entries shall be retained for at least 90
days or until investigations of system violations and incidents have been
investigated, resolved and recorded.