AC-18(4)

Requirement

Identify and explicitly authorize users allowed to independently configure wireless networking capabilities.

Discussion

Organizational authorizations to allow selected users to configure wireless networking capabilities are enforced, in part, by the access enforcement mechanisms employed within organizational systems.

NIST 800-53A Assessment Guidance

Examine

[SELECT FROM: Access control policy; procedures addressing wireless implementation and usage (including restrictions); system design documentation; system configuration settings and associated documentation; system audit records; system security plan; other relevant documents or records].

Interview

[SELECT FROM: System/network administrators; organizational personnel with information security responsibilities].

Test

[SELECT FROM: Mechanisms authorizing independent user configuration of wireless networking capabilities].

ID	Assessment Objectives
AC-18(04)[01]	users allowed to independently configure wireless networking capabilities are identified;
AC-18(04)[02]	users allowed to independently configure wireless networking capabilities are explicitly authorized.

Our CMMC Overview Course simplifies CMMC. Enroll so you can make informed decisions!