AC-17(1)

Requirement

Employ automated mechanisms to monitor and control remote access methods.

Discussion

Monitoring and control of remote access methods allows organizations to detect attacks and help ensure compliance with remote access policies by auditing the connection activities of remote users on a variety of system components, including servers, notebook computers, workstations, smart phones, and tablets. Audit logging for remote access is enforced by AU-2. Audit events are defined in AU-2a.

NIST 800-53A Assessment Guidance

Examine

[SELECT FROM: Access control policy; procedures addressing remote access to the system; system design documentation; system configuration settings and associated documentation; system audit records; system monitoring records; system security plan; other relevant documents or records].

Interview

[SELECT FROM: System/network administrators; organizational personnel with information security responsibilities; system developers].

Test

[SELECT FROM: Automated mechanisms monitoring and controlling remote access methods].

ID	Assessment Objectives
AC-17(01)[01]	automated mechanisms are employed to monitor remote access methods;
AC-17(01)[02]	automated mechanisms are employed to control remote access methods.

Our CMMC Overview Course simplifies CMMC. Enroll so you can make informed decisions!