Eleos | Home

Access Control (AC)

Access Control for Mobile Devices | Restrictions for Classified Information

Level N/A

(a) Prohibit the use of unclassified mobile devices in facilities containing systems processing, storing, or transmitting classified information unless specifically permitted by the authorizing official; and (b) Enforce the following restrictions on individuals permitted by the authorizing official to use unclassified mobile devices in facilities containing systems processing, storing, or transmitting classified information: (1) Connection of unclassified mobile devices to classified systems is prohibited; (2) Connection of unclassified mobile devices to unclassified systems requires approval from the authorizing official; (3) Use of internal or external modems or wireless interfaces within the unclassified mobile devices is prohibited; and (4) Unclassified mobile devices and the information stored on those devices are subject to random reviews and inspections by [Assignment: organization-defined security officials], and if classified information is found, the incident handling policy is followed. (c) Restrict the connection of classified mobile devices to classified systems in accordance with [Assignment: organization-defined security policies].

Solutions
Community

Access Control (AC)

Access Control for Mobile Devices | Full Device or Container-based Encryption

Level N/A

Employ [Selection: full-device encryption; container-based encryption] to protect the confidentiality and integrity of information on [Assignment: organization-defined mobile devices].

Parent

Compliance Framework

NIST 800-53 Rev 5

Control Number

AC-19(5)

Related

Compliance Framework

CCM v4.0.10

Secure Controls Framework 2023.4

Control Number

CEK-03

UEM-08

MDM-03

Solutions
Community

Access Control (AC)

Use of External Systems

Level N/A

a. [Selection (one or more): Establish [Assignment: organization-defined terms and conditions]; Identify [Assignment: organization-defined controls asserted to be implemented on external systems]], consistent with the trust relationships established with other organizations owning, operating, and/or maintaining external systems, allowing authorized individuals to: 1. Access the system from external systems; and 2. Process, store, or transmit organization-controlled information using external systems; or b. Prohibit the use of [Assignment: organizationally-defined types of external systems].

Parent

Compliance Framework

NIST 800-53 Rev 5

Control Number

AC-20

Related

Compliance Framework

CCM v4.0.10

Secure Controls Framework 2023.4

Control Number

HRS-04

IAM-16

IVS-07

DCH-13

Solutions
Community

Access Control (AC)

Use of External Systems | Limits on Authorized Use

Level N/A

Permit authorized individuals to use an external system to access the system or to process, store, or transmit organization-controlled information only after: (a) Verification of the implementation of controls on the external system as specified in the organization’s security and privacy policies and security and privacy plans; or (b) Retention of approved system connection or processing agreements with the organizational entity hosting the external system.

Parent

Compliance Framework

NIST 800-53 Rev 5

Control Number

AC-20(1)

Related

Compliance Framework

CCM v4.0.10

Secure Controls Framework 2023.4

Control Number

HRS-04

IAM-16

DCH-13.1

Solutions
Community

Access Control (AC)

Use of External Systems | Portable Storage Devices — Restricted Use

Level N/A

Restrict the use of organization-controlled portable storage devices by authorized individuals on external systems using [Assignment: organization-defined restrictions].

Parent

Compliance Framework

NIST 800-53 Rev 5

Control Number

AC-20(2)

Related

Compliance Framework

CCM v4.0.10

Secure Controls Framework 2023.4

Control Number

HRS-04

DCH-13.2

Solutions
Community

Access Control (AC)

Use of External Systems | Non-organizationally Owned Systems — Restricted Use

Level N/A

Restrict the use of non-organizationally owned systems or system components to process, store, or transmit organizational information using [Assignment: organization-defined restrictions].

Parent

Compliance Framework

NIST 800-53 Rev 5

Control Number

AC-20(3)

Related

Compliance Framework

CCM v4.0.10

Secure Controls Framework 2023.4

Control Number

HRS-04

DCH-13.4

Solutions
Community

Access Control (AC)

Use of External Systems | Network Accessible Storage Devices — Prohibited Use

Level N/A

Prohibit the use of [Assignment: organization-defined network accessible storage devices] in external systems.

Parent

Compliance Framework

NIST 800-53 Rev 5

Control Number

AC-20(4)

Related

Compliance Framework

CCM v4.0.10

Control Number

HRS-04

Solutions
Community

Access Control (AC)

Use of External Systems | Portable Storage Devices — Prohibited Use

Level N/A

Prohibit the use of organization-controlled portable storage devices by authorized individuals on external systems.

Parent

Compliance Framework

NIST 800-53 Rev 5

Control Number

AC-20(5)

Related

Compliance Framework

CCM v4.0.10

Secure Controls Framework 2023.4

Control Number

HRS-04

DCH-13.2

Solutions
Community

Access Control (AC)

Information Sharing

Level N/A

a. Enable authorized users to determine whether access authorizations assigned to a sharing partner match the information’s access and use restrictions for [Assignment: organization-defined information sharing circumstances where user discretion is required]; and b. Employ [Assignment: organization-defined automated mechanisms or manual processes] to assist users in making information sharing and collaboration decisions.

Parent

Compliance Framework

NIST 800-53 Rev 5

Control Number

AC-21

Related

Compliance Framework

Secure Controls Framework 2023.4

Control Number

DCH-14

PRI-07

Solutions
Community

Access Control (AC)

Information Sharing | Automated Decision Support

Level N/A

Employ [Assignment: organization-defined automated mechanisms] to enforce information-sharing decisions by authorized users based on access authorizations of sharing partners and access restrictions on information to be shared.

Solutions
Community

Access Control (AC)

Create new POAM

Create new Exception

Assign to POAM

Assign to Exception

Access Control (AC)

Create new POAM

Create new Exception

Assign to POAM

Assign to Exception

Access Control (AC)

Create new POAM

Create new Exception

Assign to POAM

Assign to Exception

Access Control (AC)

Create new POAM

Create new Exception

Assign to POAM

Assign to Exception

Access Control (AC)

Create new POAM

Create new Exception

Assign to POAM

Assign to Exception

Access Control (AC)

Create new POAM

Create new Exception

Assign to POAM

Assign to Exception

Access Control (AC)

Create new POAM

Create new Exception

Assign to POAM

Assign to Exception

Access Control (AC)

Create new POAM

Create new Exception

Assign to POAM

Assign to Exception

Access Control (AC)

Create new POAM

Create new Exception

Assign to POAM

Assign to Exception

Access Control (AC)

Create new POAM

Create new Exception

Assign to POAM

Assign to Exception

Organization Passcode

Only share this code with people you trust. Users will become a member of your organization and view your SSP and reports.