Access Control

Overview:Control information posted or processed on publicly accessible information systems. Action Items:3.1.22[a]Determine if: individuals authorized to post or process information on publicly accessible systems are identified. 3.1.22[b]Determine... Read More

Overview:Authorize remote execution of privileged commands and remote access to security-relevant information. Action Items:3.1.15[a]Determine if: privileged commands authorized for remote execution are identified. 3.1.15[b]Determine if: security... Read More

Overview:Monitor and control remote access sessions. Action Items:3.1.12[a]Determine if: remote access sessions are permitted. 3.1.12[b]Determine if: the types of permitted remote access are identified. 3.1.12[c]Determine if: remote access sessions... Read More

Overview:Separate the duties of individuals to reduce the risk of malevolent activity without collusion. Action Items:3.1.4[a]Determine if: the duties of individuals requiring separation are defined. 3.1.4[b]Determine if: responsibilities for duties... Read More

Overview:Use session lock with pattern-hiding displays to prevent access/viewing of data after period of inactivity. Action Items:3.1.10[a]Determine if: the period of inactivity after which the system initiates a session lock is defined. 3.1.10[b... Read More

Overview:Terminate (automatically) a user session after a defined condition. Action Items:3.1.11[a]Determine if: conditions requiring a user session to terminate are defined. 3.1.11[b]Determine if: a user session is automatically terminated after any... Read More

Overview:Provide privacy and security notices consistent with applicable CUI rules. Action Items:3.1.9[a]Determine if: privacy and security notices required by CUI-specified rules are identified, consistent, and associated with the specific CUI... Read More

Overview:Limit unsuccessful logon attempts. Action Items:3.1.8[a]Determine if: the means of limiting unsuccessful logon attempts is defined. 3.1.8[b]Determine if: the defined means of limiting unsuccessful logon attempts is implemented. POTENTIAL... Read More

Overview:Verify and control/limit connections to and use of external information systems. Action Items:3.1.20[a]Determine if: connections to external systems are identified. 3.1.20[b]Determine if: the use of external systems is identified. 3.1.20[c... Read More

Overview:Limit use of organizational portable storage devices on external information systems. Action Items:3.1.21[a]Determine if: the use of portable storage devices containing CUI on external systems is identified and documented. 3.1.21[b]Determine... Read More