AC-18

Requirement
1. Establish configuration requirements, connection requirements, and implementation guidance for each type of wireless access; and
2. Authorize each type of wireless access to the system prior to allowing such connections.

Discussion

Wireless technologies include microwave, packet radio (ultra-high frequency or very high frequency), 802.11x, and Bluetooth. Wireless networks use authentication protocols that provide authenticator protection and mutual authentication.

Related NIST 800-53 ID

AC-2;AC-3;AC-17;AC-19;CA-9;CM-7;IA-2;IA-3;IA-8;PL-4;SC-40;SC-43;SI-4

NIST 800-53A Assessment Guidance

Examine

[SELECT FROM: Access control policy; procedures addressing wireless access implementation and usage (including restrictions); configuration management plan; system design documentation; system configuration settings and associated documentation; wireless access authorizations; system audit records; system security plan; other relevant documents or records].

Interview

[SELECT FROM: Organizational personnel with responsibilities for managing wireless access connections; organizational personnel with information security responsibilities].

ID	Assessment Objectives
AC-18a.[03]	implementation guidance is established for each type of wireless access;
AC-18b.	each type of wireless access to the system is authorized prior to allowing such connections.
AC-18a.[01]	configuration requirements are established for each type of wireless access;
AC-18a.[02]	connection requirements are established for each type of wireless access;

Our CMMC Overview Course simplifies CMMC. Enroll so you can make informed decisions!