Agencies with smaller computer installations must:
A. Protect access with locked rooms, at minimum.B. Establish procedures for granting, modifying, and revoking access.C. Establish procedures for recording information (date, time, etc.) to track access.