AC-17(9)

Requirement

Provide the capability to disconnect or disable remote access to the system within [Assignment: organization-defined time period].

Discussion

The speed of system disconnect or disablement varies based on the criticality of missions or business functions and the need to eliminate immediate or future remote access to systems.

NIST 800-53A Assessment Guidance

Examine

[SELECT FROM: Access control policy; procedures addressing disconnecting or disabling remote access to the system; system design documentation; system configuration settings and associated documentation; security plan, system audit records; system security plan; other relevant documents or records].

Interview

[SELECT FROM: System/network administrators; organizational personnel with information security responsibilities; system developers].

Test

[SELECT FROM: Mechanisms implementing capability to disconnect or disable remote access to system].

ID	Assessment Objectives
AC-17(09)	the capability to disconnect or disable remote access to the system within <AC-17(09)_ODP time period> is provided.

Our CMMC Overview Course simplifies CMMC. Enroll so you can make informed decisions!