+AC-18 [M] Wireless Access
---+AC-18(01) [M] Authentication and Encryption
---+AC-18(03) [M] Disable Wireless Networking

AC-18 [M] Wireless Access

Control

  1. Establish configuration requirements, connection requirements, and implementation guidance for each type of wireless access; and
  2. Authorize each type of wireless access to the system prior to allowing such connections.

Discussion

Wireless technologies include microwave, packet radio (ultra-high frequency or very high frequency), 802.11x, and Bluetooth. Wireless networks use authentication protocols that provide authenticator protection and mutual authentication.

Assessment Objective

    1. configuration requirements are established for each type of wireless access;
    2. connection requirements are established for each type of wireless access;
    3. implementation guidance is established for each type of wireless access;
  2. each type of wireless access to the system is authorized prior to allowing such connections.

Assessment Method

Examine

Access control policy procedures addressing wireless access implementation and usage (including restrictions) configuration management plan system design documentation system configuration settings and associated documentation wireless access authorizations system audit records system security plan other relevant documents or records

Interview

Organizational personnel with responsibilities for managing wireless access connections organizational personnel with information security responsibilities

1. Přehled

AC-18(01) [M] Authentication and Encryption

Control

Protect wireless access to the system using authentication of [Selection(one-or-more): users; devices] and encryption.

Discussion

Wireless networking capabilities represent a significant potential vulnerability that can be exploited by adversaries. To protect systems with wireless access points, strong authentication of users and devices along with strong encryption can reduce susceptibility to threats by adversaries involving wireless technologies.

Assessment Objective

  1. wireless access to the system is protected using authentication of [Selection(one-or-more): users; devices];
  2. wireless access to the system is protected using encryption.

Assessment Method

Examine

Access control policy procedures addressing wireless implementation and usage (including restrictions) system design documentation system configuration settings and associated documentation system audit records system security plan other relevant documents or records

Interview

System/network administrators organizational personnel with information security responsibilities system developers
AC-18(03) [M] Disable Wireless Networking

Control

Disable, when not intended for use, wireless networking capabilities embedded within system components prior to issuance and deployment.

Discussion

Wireless networking capabilities that are embedded within system components represent a significant potential vulnerability that can be exploited by adversaries. Disabling wireless capabilities when not needed for essential organizational missions or functions can reduce susceptibility to threats by adversaries involving wireless technologies.

Assessment Objective

when not intended for use, wireless networking capabilities embedded within system components are disabled prior to issuance and deployment.

Assessment Method

Examine

Access control policy procedures addressing wireless implementation and usage (including restrictions) system design documentation system configuration settings and associated documentation system audit records system security plan other relevant documents or records

Interview

System/network administrators organizational personnel with information security responsibilities

1.1 Odkazy

1.2 Identifikované požadavky

1.3 Související regulace

2. Identifikované požadavky

Požadavky

3. Související regulace

Regulace

Propojené úkoly

Vazby
is blocked by AC-18 [M] Wireless Access – Assessment Procedure
is blocked by Wireless Access Authentication & Encryption
is blocked by Wireless Networking