03.01.05E Remote Access Monitoring and Control

Statement

Employ automated mechanisms to monitor and control remote access methods.

Guidance

Monitoring and controlling remote access methods allows organizations to detect attacks and ensure compliance with remote access policies. This is accomplished by auditing the connection activities of remote users on system components, including servers, notebook computers, workstations, smart phones, and tablets. This requirement enhances SP 800-171 requirement 03.01.02.

Statement

• (includes preempt) Ensure that the threat event does not have an impact.

  • Reduce likelihood of occurrence and/or reduce likelihood of impact.

  • The adversary’s efforts or resources cannot be applied or are wasted.

• (includes exert) Make it more difficult for threat events to cause adverse impacts or consequences.

  • Reduce likelihood of impact and reduce level of impact.

  • Adversary activities are restricted in scope, fail to achieve full effect, do not take place in accordance with adversary timeline, or require greater resources than adversary had planned.

Assessment objective

automated mechanisms are employed to monitor remote access methods.

Assessment objective

automated mechanisms are employed to control remote access methods.

Assessment method

• Access control policy procedures addressing remote access to the system system design documentation system configuration settings and associated documentation system audit records system monitoring records system security plan other relevant documents or records

Assessment method

• System/network administrators personnel with information security responsibilities system developers

Assessment method

• Automated mechanisms monitoring and controlling remote access methods

1. Prezentare generală

1.1 Referințe

1.2 Cerințe identificate

1.3 Reglementări asociate

2. Cerințe identificate

3. Reglementări asociate

Tichete legate

• NIST -

  https://csrc.nist.gov/pubs/sp/800/53/r5/upd1/final