AC-17(6)

Requirement

Protect information about remote access mechanisms from unauthorized use and disclosure.

Discussion

Remote access to organizational information by non-organizational entities can increase the risk of unauthorized use and disclosure about remote access mechanisms. The organization considers including remote access requirements in the information exchange agreements with other organizations, as applicable. Remote access requirements can also be included in rules of behavior (see PL-4) and access agreements (see PS-6).

NIST 800-53A Assessment Guidance

Examine

[SELECT FROM: Access control policy; procedures addressing remote access to the system; system security plan; other relevant documents or records].

Interview

[SELECT FROM: Organizational personnel with responsibilities for implementing or monitoring remote access to the system; system users with knowledge of information about remote access mechanisms; organizational personnel with information security responsibilities].

ID	Assessment Objectives
AC-17(06)	information about remote access mechanisms is protected from unauthorized use and disclosure.

Our CMMC Overview Course simplifies CMMC. Enroll so you can make informed decisions!