AC-17(3)

Requirement

Route remote accesses through authorized and managed network access control points.

Discussion

Organizations consider the Trusted Internet Connections (TIC) initiative DHS TIC requirements for external network connections since limiting the number of access control points for remote access reduces attack surfaces.

NIST 800-53A Assessment Guidance

Examine

[SELECT FROM: Access control policy; procedures addressing remote access to the system; system design documentation; list of all managed network access control points; system configuration settings and associated documentation; system audit records; system security plan; other relevant documents or records].

Interview

[SELECT FROM: System/network administrators; organizational personnel with information security responsibilities].

Test

[SELECT FROM: Mechanisms routing all remote accesses through managed network access control points].

ID	Assessment Objectives
AC-17(03)	remote accesses are routed through authorized and managed network access control points.

Our CMMC Overview Course simplifies CMMC. Enroll so you can make informed decisions!