+AC-17(03) [M] Managed Access Control Points

AC-17(03) [M] Managed Access Control Points

Control

Route remote accesses through authorized and managed network access control points.

Discussion

Organizations consider the Trusted Internet Connections (TIC) initiative [DHS TIC](#4f42ee6e-86cc-403b-a51f-76c2b4f81b54) requirements for external network connections since limiting the number of access control points for remote access reduces attack surfaces.

Assessment Objective

remote accesses are routed through authorized and managed network access control points.

Assessment Method

Examine

Access control policy procedures addressing remote access to the system system design documentation list of all managed network access control points system configuration settings and associated documentation system audit records system security plan other relevant documents or records

Interview

System/network administrators organizational personnel with information security responsibilities

1. Overview

1.1 References

1.2 Identified Requirements

1.3 Related Regulations

2. Identified Requirements

Requirements

3. Related Regulations

Regulations

Linked Issues

Issuelinks
is blocked by AC-17(03) [M] Managed Access Control Points – Assessment Procedure
is blocked by Remote Access Pathways