CyberStrikeus/CyberStrike - Page 116

ac-17-10-authenticate-remote-commands

Implement [organization-defined] to authenticate [organization-defined].

ac-17-3-managed-access-control-points

Route remote accesses through authorized and managed network access control points.

ac-17-4-privileged-commands-and-access

Authorize the execution of privileged commands and access to security-relevant information via remote access only in a format that provides assessa...

ac-17-5-monitoring-for-unauthorized-connections

Monitoring for Unauthorized Connections

ac-17-6-protection-of-mechanism-information

Protect information about remote access mechanisms from unauthorized use and disclosure.

ac-17-7-additional-protection-for-security-function-access

Additional Protection for Security Function Access

ac-17-8-disable-nonsecure-network-protocols

Disable Nonsecure Network Protocols

ac-17-9-disconnect-or-disable-access

Provide the capability to disconnect or disable remote access to the system within [organization-defined].

ac-17-remote-access

Establish and document usage restrictions, configuration/connection requirements, and implementation guidance for each type of remote access allowed;

ac-18-1-authentication-and-encryption

Protect wireless access to the system using authentication of [organization-defined] and encryption.

ac-18-2-monitoring-unauthorized-connections

Monitoring Unauthorized Connections

ac-18-3-disable-wireless-networking

Disable, when not intended for use, wireless networking capabilities embedded within system components prior to issuance and deployment.

ac-18-4-restrict-configurations-by-users

Identify and explicitly authorize users allowed to independently configure wireless networking capabilities.

ac-18-5-antennas-and-transmission-power-levels

Select radio antennas and calibrate transmission power levels to reduce the probability that signals from wireless access points can be received outsi

ac-18-wireless-access

Establish configuration requirements, connection requirements, and implementation guidance for each type of wireless access;

ac-19-1-use-of-writable-and-portable-storage-devices

Use of Writable and Portable Storage Devices

ac-19-2-use-of-personally-owned-portable-storage-devices

Use of Personally Owned Portable Storage Devices

ac-19-4-restrictions-for-classified-information

Prohibit the use of unclassified mobile devices in facilities containing systems processing, storing, or transmitting classified information unless...

ac-19-5-full-device-or-container-based-encryption

Employ [organization-defined] to protect the confidentiality and integrity of information on [organization-defined].

ac-19-access-control-for-mobile-devices

Establish configuration requirements, connection requirements, and implementation guidance for organization-controlled mobile devices, to include w...

ac-2-1-automated-system-account-management

Support the management of system accounts using [organization-defined].

ac-2-10-shared-and-group-account-credential-change

Shared and Group Account Credential Change

ac-2-11-usage-conditions

Enforce [organization-defined] for [organization-defined].

ac-2-12-account-monitoring-for-atypical-usage

Monitor system accounts for [organization-defined] ;

ac-2-13-disable-accounts-for-high-risk-individuals

Disable accounts of individuals within [organization-defined] of discovery of [organization-defined].

ac-2-2-automated-temporary-and-emergency-account-management

Automatically [organization-defined] temporary and emergency accounts after [organization-defined].

ac-2-3-disable-accounts

Disable accounts within [organization-defined] when the accounts: Have expired; Are no longer associated with a user or individual; Are in violation o

ac-2-4-automated-audit-actions

Automatically audit account creation, modification, enabling, disabling, and removal actions.

ac-2-5-inactivity-logout

Require that users log out when [organization-defined].

ac-2-6-dynamic-privilege-management

Implement [organization-defined].

ac-2-7-privileged-user-accounts

Establish and administer privileged user accounts in accordance with [organization-defined];

ac-2-8-dynamic-account-management

Create, activate, manage, and deactivate [organization-defined] dynamically.

ac-2-9-restrictions-on-use-of-shared-and-group-accounts

Only permit the use of shared and group accounts that meet [organization-defined].

ac-2-account-management

Define and document the types of accounts allowed and specifically prohibited for use within the system;

ac-20-1-limits-on-authorized-use

Permit authorized individuals to use an external system to access the system or to process, store, or transmit organization-controlled information onl

ac-20-2-portable-storage-devices-restricted-use

Restrict the use of organization-controlled portable storage devices by authorized individuals on external systems using [organization-defined].

ac-20-3-non-organizationally-owned-systems-restricted-use

Restrict the use of non-organizationally owned systems or system components to process, store, or transmit organizational information using [organizat

ac-20-4-network-accessible-storage-devices-prohibited-use

Prohibit the use of [organization-defined] in external systems.

ac-20-5-portable-storage-devices-prohibited-use

Prohibit the use of organization-controlled portable storage devices by authorized individuals on external systems.

ac-20-use-of-external-systems

[organization-defined] , consistent with the trust relationships established with other organizations owning, operating, and/or maintaining external s